Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: a7c1eda41a7628f9168d787b9735d4f008f64f96
https://github.com/WebKit/WebKit/commit/a7c1eda41a7628f9168d787b9735d4f008f64f96
Author: Claudio Saavedra <[email protected]>
Date: 2026-10-03 (Sat, 03 Oct 2026)
Changed paths:
M Source/JavaScriptCore/API/glib/JSCCallbackFunction.cpp
Log Message:
-----------
REGRESSION(308608@main): [GLib] JSCCallbackFunction::construct() builds the
arguments span with the wrong size
https://bugs.webkit.org/show_bug.cgi?id=326077
Reviewed by Patrick Griffis.
The span over the JSValueRef array is sized by parameterCount, but the
array has argumentCount elements. Every access is guarded by
i < argumentCount so nothing reads past the end today, but the span claims
elements that do not exist. Size it by argumentCount, as call() does.
* Source/JavaScriptCore/API/glib/JSCCallbackFunction.cpp:
(JSC::JSCCallbackFunction::construct):
Canonical link: https://commits.webkit.org/322608@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
