289430 2025-03-09 07:32:55 -0700 [JSC] `Set#union` and `Set#synmmetric` should get `next` before cloning `this` 2025-03-09 20:17:13 -0700 1 1 1 Unclassified WebKit JavaScriptCore WebKit Local Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 sosuke webkit-unassigned webkit-bug-importer oldest_to_newest 2101742 0 sosuke 2025-03-09 07:32:55 -0700 According to the spec[1][2], `Set#symmetricDifference` and `Set#union` get keys iterator's `next` method via `GetIteratorFromMethod`[3] and `GetIteratorDirect`[4] before cloning `this`. However, the current JSC implementation don't get it. Getting `next` method can occur observable side effects, so we need to fix it. [1]: https://tc39.es/ecma262/#sec-set.prototype.symmetricdifference [2]: https://tc39.es/ecma262/#sec-set.prototype.union [3]: https://tc39.es/ecma262/#sec-getiteratorfrommethod [4]: https://tc39.es/ecma262/#sec-getiteratordirect 2101743 1 sosuke 2025-03-09 07:34:13 -0700 Pull request: https://github.com/WebKit/WebKit/pull/42158 2101816 2 ews-feeder 2025-03-09 20:16:40 -0700 Committed 291875@main (b07e269b5a00): <https://commits.webkit.org/291875@main> Reviewed commits have been landed. Closing PR #42158 and removing active labels. 2101817 3 webkit-bug-importer 2025-03-09 20:17:13 -0700 <rdar://problem/146627064>