[webkit-changes] [WebKit/WebKit] fac822: arrayInitElem should check if the segment is null

[Daniel Liu]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: fac82297d3225011b6c4dce307f1a9f9ee163710
      https://github.com/WebKit/WebKit/commit/fac82297d3225011b6c4dce307f1a9f9ee163710
  Author: Daniel Liu <danlliu at umich.edu>
  Date:   2025-02-14 (Fri, 14 Feb 2025)

  Changed paths:
    M Source/JavaScriptCore/wasm/WasmOperationsInlines.h

  Log Message:
  -----------
  arrayInitElem should check if the segment is null
https://bugs.webkit.org/show_bug.cgi?id=287677
rdar://144817380

Reviewed by Yijia Huang.

289530 at main updated the handling of array_init_elem, but did not check
for if the segment is null. Thus, a debug assertion within copyElementSegment
could try to dereference a null pointer when checking the length.

* Source/JavaScriptCore/wasm/WasmOperationsInlines.h:
(JSC::Wasm::arrayInitElem):

Canonical link: https://commits.webkit.org/290405@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications