Bug 210055

Summary:

[JSC] Since ArrayBufferViewWatchpointAdaptor::add can fire watchpoints, DFG::Plan should check validity of CodeBlock after executing reallyAdd

Product:

WebKit

Reporter:

Yusuke Suzuki <ysuzuki>

Component:

New Bugs

Assignee:

Yusuke Suzuki <ysuzuki>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ews-watchlist, keith_miller, mark.lam, msaboff, saam, tzagallo, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none
Patch	keith_miller: review+

Description Yusuke Suzuki 2020-04-06 10:17:06 PDT

[JSC] Since ArrayBufferViewWatchpointAdaptor::add can fire watchpoints, DFG::Plan should check validity of CodeBlock after executing reallyAdd

Comment 1 Yusuke Suzuki 2020-04-06 10:19:26 PDT

Created attachment 395582 [details]
Patch

Comment 2 Yusuke Suzuki 2020-04-06 10:19:29 PDT

<rdar://problem/61331962>

Comment 3 Yusuke Suzuki 2020-04-06 10:22:24 PDT

Created attachment 395583 [details]
Patch

Comment 4 Keith Miller 2020-04-06 10:32:10 PDT

Comment on attachment 395583 [details]
Patch

r=me.

Comment 5 Yusuke Suzuki 2020-04-06 10:36:02 PDT

Committed r259576: <https://trac.webkit.org/changeset/259576>