Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: a55e1741c32dea35cb7c2f97006797d4cc53ce6e
https://github.com/WebKit/WebKit/commit/a55e1741c32dea35cb7c2f97006797d4cc53ce6e
Author: Yusuke Suzuki <[email protected]>
Date: 2025-08-15 (Fri, 15 Aug 2025)
Changed paths:
A JSTests/stress/copy-data-properties-underscore-proto.js
M Source/JavaScriptCore/runtime/JSGlobalObjectFunctions.cpp
Log Message:
-----------
Cherry-pick 298705@main (2f0cc5324e75).
https://bugs.webkit.org/show_bug.cgi?id=293578
ASSERTION FAILED: !(attributes & (PropertyAttribute::Accessor |
PropertyAttribute::CustomAccessor | PropertyAttribute::ReadOnly))
https://bugs.webkit.org/show_bug.cgi?id=293578
rdar://152034597
Reviewed by Keith Miller.
Do not allow copyDataProperties fast path when source structure is
having __proto__ property.
* JSTests/stress/copy-data-properties-underscore-proto.js: Added.
(C0):
(const.v4.set __proto__):
* Source/JavaScriptCore/runtime/JSGlobalObjectFunctions.cpp:
(JSC::canPerformFastPropertyEnumerationForCopyDataProperties):
Originally-landed-as: 289651.541@safari-7621-branch (a59d9e4235bd).
rdar://157790814
Canonical link: https://commits.webkit.org/298705@main
Canonical link: https://commits.webkit.org/298234.15@webkitglib/2.50
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
