[Webkit-unassigned] [Bug 284131] New: JSC::JSValue convert of JSConverter<IDLRecord<K, V>> crashes when converting an input WebCore::IDLRecord<WebCore::IDLUSVString, WebCore::IDLUnion<WebCore::IDLUndefined, WebCore::IDLUSVString>>

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=284131

            Bug ID: 284131
           Summary: JSC::JSValue convert of JSConverter<IDLRecord<K, V>>
                    crashes when converting an input
                    WebCore::IDLRecord<WebCore::IDLUSVString,
                    WebCore::IDLUnion<WebCore::IDLUndefined,
                    WebCore::IDLUSVString>>
           Product: WebKit
           Version: Other
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: jlee53 at apple.com

The converter seems to mistakenly interpret a String as a number. (The String is in fact the string "0"). 

The input dictionary / union originates from <https://github.com/WebKit/WebKit/pull/37467>. It is `struct URLPatternComponentResult` defined in URLPattern.h / URLPatternResult.idl

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20241205/0cd0605a/attachment.htm>