Bug 287319
| Summary: | [JSC] Crash in `Array#indexOf` when searching for string values in an `ArrayWithContiguous` that contains non-cell values | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Sosuke Suzuki <aosukeke> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | rhezashan, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Local Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Sosuke Suzuki
We merged a patch[1] that optimized `Array#indexOf` for arrays containing 8-bit strings. As a result of that change, searching for a string in an `ArrayWithContiguous` array started causing crashes.
This patch changes to fix it.
[1]: https://commits.webkit.org/289780@main
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Sosuke Suzuki
Pull request: https://github.com/WebKit/WebKit/pull/40273
EWS
Committed 290136@main (e470f352d9ce): <https://commits.webkit.org/290136@main>
Reviewed commits have been landed. Closing PR #40273 and removing active labels.
Radar WebKit Bug Importer
<rdar://problem/144497694>
Mark Lam
*** Bug 287096 has been marked as a duplicate of this bug. ***