Bug 281650

Summary: Fix missing exception check in arrayProtoFuncConcat.
Product: WebKit Reporter: Mark Lam <mark.lam>
Component: JavaScriptCoreAssignee: Mark Lam <mark.lam>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Mark Lam
Reported 2024-10-16 22:43:01 PDT
moveArrayElements() can throw. Hence, we need an exception check after it before falling through to setLength().
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-10-16 22:43:24 PDT
<rdar://problem/138092131>
Mark Lam
Comment 2 2024-10-16 22:49:02 PDT
Pull request: https://github.com/WebKit/WebKit/pull/35346
EWS
Comment 3 2024-10-17 10:06:40 PDT
Committed 285344@main (1a8f794a74af): <https://commits.webkit.org/285344@main> Reviewed commits have been landed. Closing PR #35346 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.