RESOLVED FIXED302089
[JSC] Make B3::IsLegalOffset actually enforce signed 32-bit types 
https://bugs.webkit.org/show_bug.cgi?id=302089
Summary [JSC] Make B3::IsLegalOffset actually enforce signed 32-bit types
Dan Hecht
Reported 2025-11-06 08:42:01 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2025-11-06 08:42:10 PST
<rdar://problem/164175031>
Dan Hecht
Comment 2 2025-11-06 08:50:47 PST
Pull request: https://github.com/WebKit/WebKit/pull/53530
EWS
Comment 3 2025-11-07 08:27:01 PST
Committed 302727@main (9d9bfb82f4fd): <https://commits.webkit.org/302727@main> Reviewed commits have been landed. Closing PR #53530 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.