RESOLVED FIXED316508
[JSC] `String#split` RegExp fast path misses side effects from `ToString(this)` and `ToUint32(limit)` 
https://bugs.webkit.org/show_bug.cgi?id=316508
Summary [JSC] `String#split` RegExp fast path misses side effects from `ToString(this...
Sosuke Suzuki
Reported 2026-06-07 19:43:42 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Sosuke Suzuki
Comment 1 2026-06-07 19:44:31 PDT
Pull request: https://github.com/WebKit/WebKit/pull/66652
EWS
Comment 2 2026-06-08 19:11:29 PDT
Committed 314772@main (b4b15818d650): <https://commits.webkit.org/314772@main> Reviewed commits have been landed. Closing PR #66652 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-06-08 19:12:13 PDT
<rdar://problem/179056476>
Note You need to log in before you can comment on or make changes to this bug.