Bug 284130

Summary:	JSC::JSValue convert of JSConverter<IDLRecord<K, V>> crashes when converting an input WebCore::IDLRecord<WebCore::IDLUSVString, WebCore::IDLUnion<WebCore::IDLUndefined, WebCore::IDLUSVString>>
Product:	WebKit	Reporter:	jlee53
Component:	New Bugs	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal
Priority:	P2
Version:	Other
Hardware:	Unspecified
OS:	Unspecified

jlee53

Reported 2024-12-05 14:18:00 PST

The converter seems to mistakenly interpret a String as a number. (The String is in fact the string "0"). The input dictionary / union originates from <https://github.com/WebKit/WebKit/pull/37467>. It is `struct URLPatternComponentResult` defined in URLPattern.h / URLPatternResult.idl

Attachments
Add attachment proposed patch, testcase, etc.

Alexey Proskuryakov

Comment 1 2024-12-09 10:11:01 PST

*** This bug has been marked as a duplicate of bug 284129 ***

Note You need to log in before you can comment on or make changes to this bug.