[webkit-changes] [WebKit/WebKit] d66fa2: [JSC] `Object.assign` shouldn't do batching when s...

[SUZUKI Sosuke]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: d66fa25fde998b79374a53a6df932a921640d56d
      https://github.com/WebKit/WebKit/commit/d66fa25fde998b79374a53a6df932a921640d56d
  Author: Sosuke Suzuki <aosukeke at gmail.com>
  Date:   2024-10-01 (Tue, 01 Oct 2024)

  Changed paths:
    A JSTests/stress/object-assign-self-assign.js
    M Source/JavaScriptCore/runtime/ObjectConstructor.cpp

  Log Message:
  -----------
  [JSC] `Object.assign` shouldn't do batching when sources argument contains target object
https://bugs.webkit.org/show_bug.cgi?id=280576

Reviewed by Yusuke Suzuki.

This patch changes to prevent executing the batching path when the `sources` argument of
`Object.assign` contains the same object as the `target`.

* JSTests/stress/object-assign-self-assign.js: Added.
(sameValue):
(i.CLS):
* Source/JavaScriptCore/runtime/ObjectConstructor.cpp:
(JSC::JSC_DEFINE_HOST_FUNCTION):

Canonical link: https://commits.webkit.org/284486@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications