Bug 308246

Summary: [YARR] index can exceed length when baseOffset is negative in generateBitInTableSIMDSearch
Product: WebKit Reporter: Yusuke Suzuki <ysuzuki>
Component: JavaScriptCoreAssignee: Yusuke Suzuki <ysuzuki>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Yusuke Suzuki
Reported 2026-02-19 14:07:29 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-02-19 14:07:38 PST
<rdar://problem/170751399>
Yusuke Suzuki
Comment 2 2026-02-19 14:10:16 PST
Pull request: https://github.com/WebKit/WebKit/pull/59027
Yusuke Suzuki
Comment 3 2026-02-19 14:15:15 PST
<rdar://problem/170676343>
EWS
Comment 4 2026-02-19 17:21:31 PST
Committed 307870@main (a7c349d2d10e): <https://commits.webkit.org/307870@main> Reviewed commits have been landed. Closing PR #59027 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.