Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 4cc12fa76b1f68595032ab541295f237462665e6
https://github.com/WebKit/WebKit/commit/4cc12fa76b1f68595032ab541295f237462665e6
Author: Sergey Rubanov <[email protected]>
Date: 2026-08-18 (Tue, 18 Aug 2026)
Changed paths:
A JSTests/wasm/stress/js-callee-stack-overflow.js
M Source/JavaScriptCore/wasm/WasmOperations.cpp
Log Message:
-----------
[JSC][Wasm] Don't assert NativeCallee on JS frames in wasm exception paths
https://bugs.webkit.org/show_bug.cgi?id=296371
Reviewed by Yusuke Suzuki.
Stack overflow during JS-to-Wasm or Wasm-to-JS can invoke
operationWasmToJSException while DECLARE_WASM_CALL_FRAME still points at
a JS callee. Debug then called asNativeCallee() and crashed.
Skip the callee-group check unless the frame is a NativeCallee.
* JSTests/wasm/stress/js-callee-stack-overflow.js: Added.
* Source/JavaScriptCore/wasm/WasmOperations.cpp:
(JSC::Wasm::assertCalleeIsReferenced):
Canonical link: https://commits.webkit.org/319429@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
