Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 238d63ac9ef54a2b8dbe7634a64664fd8df946c7
https://github.com/WebKit/WebKit/commit/238d63ac9ef54a2b8dbe7634a64664fd8df946c7
Author: Keith Miller <[email protected]>
Date: 2026-07-07 (Tue, 07 Jul 2026)
Changed paths:
M Source/JavaScriptCore/runtime/ArrayBuffer.cpp
M Source/JavaScriptCore/runtime/ArrayBuffer.h
M Source/WTF/wtf/CheckedArithmetic.h
Log Message:
-----------
[JSC] Push ArrayBuffer m_locked into the pinCount
https://bugs.webkit.org/show_bug.cgi?id=318706
rdar://181518238
Reviewed by Yusuke Suzuki.
Having a separate lock bit is somewhat confusing and makes the
isDetachable check more complex. Prevent underflowing the lock bit in
the pin by restoring it after any unpin for extra hardening.
No new tests, no behavior change. Covered by existing tests.
Canonical link: https://commits.webkit.org/316641@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
