[Webkit-unassigned] [Bug 242600] [AArch32][AArch64][x86_64] SHOULD NEVER BE REACHED in Expected<JSC::Wasm::PageCount, JSC::Wasm::Memory::GrowFailReason> JSC::Wasm::Memory::growShared(JSC::Wasm::PageCount)

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jul 12 14:06:50 PDT 2022


https://bugs.webkit.org/show_bug.cgi?id=242600

Yusuke Suzuki <ysuzuki at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Group|Security-Sensitive          |
                 CC|                            |ysuzuki at apple.com
          Component|Security                    |JavaScriptCore
           Assignee|webkit-security-unassigned@ |webkit-unassigned at lists.web
                   |lists.webkit.org            |kit.org
            Product|Security                    |WebKit

--- Comment #2 from Yusuke Suzuki <ysuzuki at apple.com> ---
This crash is because ARMv7 port incorrectly enabled shared Wasm memory.
This does not happen in ARM64 and x64.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220712/f4de36ef/attachment-0001.htm>


More information about the webkit-unassigned mailing list