Bug 207082

Summary: GetButterfly should check if the input value is an object in safe to execute
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED FIXED    
Severity: Normal CC: benjamin, fpizlo, ggaren, gskachkov, guijemont, keith_miller, mark.lam, msaboff, rmorisset, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 207075    
Attachments:
Description Flags
patch mark.lam: review+

Saam Barati
Reported 2020-01-31 17:47:37 PST
...
Attachments
patch (1.74 KB, patch)
2020-01-31 17:57 PST, Saam Barati 		mark.lam: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Saam Barati
Comment 1 2020-01-31 17:57:07 PST
Created attachment 389447 [details] patch
Mark Lam
Comment 2 2020-01-31 17:58:59 PST
Comment on attachment 389447 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=389447&action=review r=me > Source/JavaScriptCore/ChangeLog:11 > + for GetButterfly nodes's child1. /nodes's/node's/
Saam Barati
Comment 3 2020-01-31 18:10:08 PST
landed in: https://trac.webkit.org/changeset/255539/webkit
Radar WebKit Bug Importer
Comment 4 2020-01-31 18:11:19 PST
<rdar://problem/59082449>
Note You need to log in before you can comment on or make changes to this bug.