RESOLVED FIXED310800
BitVector::mergeSlow reads out of bounds when `this` is larger than `other` 
https://bugs.webkit.org/show_bug.cgi?id=310800
Summary BitVector::mergeSlow reads out of bounds when `this` is larger than `other`
Chris Dumez
Reported 2026-03-26 02:25:26 PDT
BitVector::mergeSlow reads out of bounds when `this` is larger than `other`.
Attachments
Add attachment proposed patch, testcase, etc.
Chris Dumez
Comment 1 2026-03-26 02:29:35 PDT
Pull request: https://github.com/WebKit/WebKit/pull/61404
EWS
Comment 2 2026-03-26 15:24:45 PDT
Committed 310027@main (3b3138e0af6c): <https://commits.webkit.org/310027@main> Reviewed commits have been landed. Closing PR #61404 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-03-26 15:25:13 PDT
<rdar://problem/173445987>
Note You need to log in before you can comment on or make changes to this bug.