Bug 278414

Summary: [JSC] TypedArray `in` can return false when it is OOB in IC
Product: WebKit Reporter: Yusuke Suzuki <ysuzuki>
Component: JavaScriptCoreAssignee: Yusuke Suzuki <ysuzuki>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Yusuke Suzuki
Reported 2024-08-20 13:32:37 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-08-20 13:32:50 PDT
<rdar://problem/134366042>
Yusuke Suzuki
Comment 2 2024-08-20 13:34:20 PDT
Pull request: https://github.com/WebKit/WebKit/pull/32481
EWS
Comment 3 2024-08-20 16:23:43 PDT
Committed 282530@main (bc160f134e54): <https://commits.webkit.org/282530@main> Reviewed commits have been landed. Closing PR #32481 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.