Bug 256567 (CVE-2023-32439)

Summary: EnumeratorNextUpdateIndexAndMode and HasIndexedProperty should have different heap location kinds
Product: WebKit Reporter: Yijia Huang <yijia_huang>
Component: JavaScriptCoreAssignee: Yijia Huang <yijia_huang>
Status: RESOLVED FIXED    
Severity: Normal CC: laiyonggao, mcatanzaro, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Yijia Huang
Reported 2023-05-09 18:26:14 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Yijia Huang
Comment 1 2023-05-09 18:26:27 PDT
<rdar://109089013>
Yijia Huang
Comment 2 2023-05-09 18:34:35 PDT
Pull request: https://github.com/WebKit/WebKit/pull/13677
EWS
Comment 3 2023-05-10 09:43:15 PDT
Committed 263909@main (52fe95e5805c): <https://commits.webkit.org/263909@main> Reviewed commits have been landed. Closing PR #13677 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.