RESOLVED FIXED 273689
[JSC] DataView constructor should check if byteOffset exceeds source ArrayBuffer length before creating an instance 
https://bugs.webkit.org/show_bug.cgi?id=273689
Summary [JSC] DataView constructor should check if byteOffset exceeds source ArrayBuf...
Attachments
Add attachment proposed patch, testcase, etc.
Sosuke Suzuki
Comment 1 2024-05-03 09:25:37 PDT
Pull request: https://github.com/WebKit/WebKit/pull/28103
EWS
Comment 2 2024-05-04 20:46:27 PDT
Committed 278385@main (b56ff58373f1): <https://commits.webkit.org/278385@main> Reviewed commits have been landed. Closing PR #28103 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2024-05-04 20:47:15 PDT
<rdar://problem/127560883>
Note You need to log in before you can comment on or make changes to this bug.