[Webkit-unassigned] [Bug 211301] [JSC] FTLLowerDFGToB3.cpp - DFG ASSERTION FAILED: Bad array type

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=211301

--- Comment #10 from Keith Miller <keith_miller at apple.com> ---
(In reply to Minh Tran from comment #9)
> (In reply to Minh Tran from comment #8)
> > 
> > *** This bug has been marked as a duplicate of bug 211914 ***
> 
> Sorry for re-edit the title. The latest patch is confirmed to fix this bug.
> Should I submit similar bugs as security bug from now on?

Submitting as security is fine. It's better to err on the side of caution. 

Bugs don't need to be in security until some port has shipped that code since it's not really an exploit until then. However, figuring out if a port has shipped the bug, or if the bug is really a longstanding issue can be hard to figure out without diving into it.

I just like to move bugs out of security when we know it's not a security bug. That way, anyone looking at bug lists doesn't try to cherry-pick it into a security release or something.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200527/b3cd5d9f/attachment-0001.htm>