RESOLVED FIXED318058
[JSC] `Array.from(arguments)` fast path should bail out when length exceeds `MAX_STORAGE_VECTOR_LENGTH` 
https://bugs.webkit.org/show_bug.cgi?id=318058
Summary [JSC] `Array.from(arguments)` fast path should bail out when length exceeds `...
Sosuke Suzuki
Reported 2026-06-28 00:39:39 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Sosuke Suzuki
Comment 1 2026-06-28 00:40:48 PDT
Pull request: https://github.com/WebKit/WebKit/pull/68041
EWS
Comment 2 2026-06-29 05:02:40 PDT
Committed 316014@main (fc179bd61c6c): <https://commits.webkit.org/316014@main> Reviewed commits have been landed. Closing PR #68041 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-06-29 05:03:12 PDT
<rdar://problem/180912892>
Note You need to log in before you can comment on or make changes to this bug.