[webkit-changes] [WebKit/WebKit] 1a3973: Harden JSLexicalEnvironment::getOwnPropertySlot by...

[Marcus Plutowski]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 1a39739f7cfb8a65349669480ccf4a6a9f023285
      https://github.com/WebKit/WebKit/commit/1a39739f7cfb8a65349669480ccf4a6a9f023285
  Author: Marcus Plutowski <achierius at gmail.com>
  Date:   2024-05-01 (Wed, 01 May 2024)

  Changed paths:
    M Source/JavaScriptCore/runtime/JSLexicalEnvironment.cpp
    M Source/JavaScriptCore/runtime/PropertySlot.h

  Log Message:
  -----------
  Harden JSLexicalEnvironment::getOwnPropertySlot by asserting the attribute's accessor status
https://bugs.webkit.org/show_bug.cgi?id=273492
rdar://120777717

Reviewed by Keith Miller.

This ensures that we don't call setValue on anything with an accessor attribute.

* Source/JavaScriptCore/runtime/JSLexicalEnvironment.cpp:
(JSC::JSLexicalEnvironment::getOwnPropertySlot):

Canonical link: https://commits.webkit.org/278237@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications