Bug 186943

Summary:

PropertyCondition::isValidValueForAttributes() should also consider deleted values.

Product:

WebKit

Reporter:

Mark Lam <mark.lam>

Component:

JavaScriptCore

Assignee:

Mark Lam <mark.lam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue, fpizlo, keith_miller, msaboff, rmorisset, saam, tzagallo, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
proposed patch.	none
proposed patch.	none
proposed patch.	none
proposed patch.	none

Mark Lam

Reported 2018-06-22 14:47:44 PDT

PropertyCondition::isValidValueForAttributes() should check if the passed in value is a deleted one before it does a jsDynamicCast on it. <rdar://problem/41370337>

Attachments
proposed patch. (3.96 KB, patch) 2018-06-22 15:02 PDT, Mark Lam	no flags	Details Formatted Diff Diff
proposed patch. (4.11 KB, patch) 2018-06-22 15:20 PDT, Mark Lam	no flags	Details Formatted Diff Diff
proposed patch. (4.21 KB, patch) 2018-06-22 15:31 PDT, Mark Lam	no flags	Details Formatted Diff Diff
proposed patch. (3.12 KB, patch) 2018-06-22 15:45 PDT, Mark Lam	no flags	Details Formatted Diff Diff
Show Obsolete (3) View All Add attachment proposed patch, testcase, etc.