Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 221dcc89aba86cb7846c4113ee7788c6b1ca9857
https://github.com/WebKit/WebKit/commit/221dcc89aba86cb7846c4113ee7788c6b1ca9857
Author: Yijia Huang <[email protected]>
Date: 2026-06-10 (Wed, 10 Jun 2026)
Changed paths:
A JSTests/stress/temporal-plainmonthday-from-large-string.js
M Source/JavaScriptCore/runtime/TemporalPlainMonthDay.cpp
Log Message:
-----------
[JSC][Temporal] Fix crash in Temporal.PlainMonthDay.from with very large
string input
https://bugs.webkit.org/show_bug.cgi?id=316805
rdar://179110736
Reviewed by Marcus Plutowski.
fromMonthDayString used makeString to include the user-supplied string
in the RangeError message. makeString calls WTFCrash on allocation
failure, so passing a very large string (e.g. ~2 GB) caused a crash
instead of a clean RangeError.
Fix by using tryMakeString with a static fallback message, matching the
pattern already used in fromYearMonthString.
Test: JSTests/stress/temporal-plainmonthday-from-large-string.js
Canonical link: https://commits.webkit.org/314986@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
