Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 392f508eef947d28a6bde03821fa669c2174c61f
https://github.com/WebKit/WebKit/commit/392f508eef947d28a6bde03821fa669c2174c61f
Author: Yijia Huang <[email protected]>
Date: 2026-06-11 (Thu, 11 Jun 2026)
Changed paths:
A JSTests/stress/ftl-osr-exit-phantom-array-unwritten-slot.js
Log Message:
-----------
[JSC] Fix incorrect handling of unwritten slots in
operationPopulateObjectInOSR for PhantomNewArrayWithButterfly
rdar://171067586
https://bugs.webkit.org/show_bug.cgi?id=308545
Reviewed by Yusuke Suzuki.
When a PhantomNewArrayWithButterfly is materialized during OSR exit, slots that
were
conditionally not written before the exit point should be treated as holes. Fix
operationPopulateObjectInOSR to handle these slots correctly instead of passing
them
to putDirectIndex.
Test: JSTests/stress/ftl-osr-exit-phantom-array-unwritten-slot.js
Originally-landed-as: 305413.393@rapid/safari-7624.2.5.110-branch
(aeeeecbce0b1). rdar://176067563
Canonical link: https://commits.webkit.org/315034@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
