Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 8c1f7d83a6e6894d75e7545e665baa1af4976295
https://github.com/WebKit/WebKit/commit/8c1f7d83a6e6894d75e7545e665baa1af4976295
Author: Shu-yu Guo <[email protected]>
Date: 2026-01-21 (Wed, 21 Jan 2026)
Changed paths:
M Source/JavaScriptCore/runtime/StringPrototypeInlines.h
Log Message:
-----------
[JSC] Release ThrowScope correctly in tryReplaceOneCharUsingString
https://bugs.webkit.org/show_bug.cgi?id=305956
rdar://168447577
Reviewed by Dan Hecht and Keith Miller.
JSString::value can resolve ropes and thus throw OOMs, so the ThrowScope should
be released when returning after such calls.
No test as OOM tests are brittle and this only manifests with
--validateExceptionChecks=1.
Canonical link: https://commits.webkit.org/305954@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
