Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: a56c848d924c3928c10db66a92017424a3dcc75a
      
https://github.com/WebKit/WebKit/commit/a56c848d924c3928c10db66a92017424a3dcc75a
  Author: Sosuke Suzuki <aosuk...@gmail.com>
  Date:   2025-08-10 (Sun, 10 Aug 2025)

  Changed paths:
    A JSTests/stress/set-prototype-union-accessor-order.js
    M Source/JavaScriptCore/runtime/SetPrototype.cpp

  Log Message:
  -----------
  [JSC] Fix duplicate `iterator.next` property access in `Set#union`
https://bugs.webkit.org/show_bug.cgi?id=297194

Reviewed by Yusuke Suzuki.

`Set#union` C++ implementation added by https://commits.webkit.org/298316@main
was accessing `iterator.next` twice instead of once, causing test262 
failures[1].

This patch fixes by using `iteratorDirect` with `forEachInIterationRecord` to
access the property only once.

[1]: https://build.webkit.org/#/builders/1232/builds/9714

* Source/JavaScriptCore/runtime/SetPrototype.cpp:
(JSC::JSC_DEFINE_HOST_FUNCTION):

Canonical link: https://commits.webkit.org/298486@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to