Bug 307146

Summary: [JSC] Limit rope traversal depth in `tryJSSubstringImpl`
Product: WebKit Reporter: Sosuke Suzuki <sosuke>
Component: JavaScriptCoreAssignee: Sosuke Suzuki <sosuke>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Sosuke Suzuki
Reported 2026-02-05 23:54:10 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Sosuke Suzuki
Comment 1 2026-02-05 23:58:24 PST
Pull request: https://github.com/WebKit/WebKit/pull/58031
EWS
Comment 2 2026-02-06 04:54:41 PST
Committed 306936@main (93f2fd68619b): <https://commits.webkit.org/306936@main> Reviewed commits have been landed. Closing PR #58031 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-02-06 04:55:14 PST
<rdar://problem/169794611>
Note You need to log in before you can comment on or make changes to this bug.