RESOLVED FIXED 214854
JSPromise::reject might throw more than an unterminated exception 
https://bugs.webkit.org/show_bug.cgi?id=214854
Summary JSPromise::reject might throw more than an unterminated exception
Saam Barati
Reported 2020-07-27 15:51:18 PDT
It calls a builtin, which, can stack overflow. Theoretically, can OOM too
Attachments
patch (5.12 KB, patch)
2020-07-27 17:22 PDT, Saam Barati 		ysuzuki: review+
DetailsFormatted DiffDiff
patch for landing (5.55 KB, patch)
2020-07-28 09:27 PDT, Saam Barati 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Saam Barati
Comment 1 2020-07-27 17:15:27 PDT
<rdar://problem/66152648>
Saam Barati
Comment 2 2020-07-27 17:22:51 PDT
Created attachment 405332 [details] patch
Yusuke Suzuki
Comment 3 2020-07-27 17:25:14 PDT
Comment on attachment 405332 [details] patch r=me if EWS gets green.
Saam Barati
Comment 4 2020-07-28 09:27:20 PDT
Created attachment 405364 [details] patch for landing
EWS
Comment 5 2020-07-28 09:52:50 PDT
Committed r264992: <https://trac.webkit.org/changeset/264992> All reviewed patches have been landed. Closing bug and clearing flags on attachment 405364 [details].
Note You need to log in before you can comment on or make changes to this bug.