Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 336c35e2c17c5f8c619d9a136dc8465cdba55e95
https://github.com/WebKit/WebKit/commit/336c35e2c17c5f8c619d9a136dc8465cdba55e95
Author: Kai Tamkun <[email protected]>
Date: 2026-06-30 (Tue, 30 Jun 2026)
Changed paths:
A JSTests/stress/slowputarraystorage-stale-structure-bit.js
M Source/JavaScriptCore/runtime/Structure.cpp
Log Message:
-----------
[JSC] Stale structure bit in SlowPutArrayStorage
https://bugs.webkit.org/show_bug.cgi?id=312487
rdar://172210517
Reviewed by Keith Miller.
Correctly sets HasNonConfigurableProperties and related bits during Structure
construction
if the IndexingType has an array storage shape.
Test: JSTests/stress/slowputarraystorage-stale-structure-bit.js
* JSTests/stress/slowputarraystorage-stale-structure-bit.js: Added.
(get k):
(get configurable):
(set t):
(catch):
* Source/JavaScriptCore/runtime/Structure.cpp:
(JSC::Structure::Structure):
Originally-landed-as: 305413.704@safari-7624-branch (dacb07e7c6bd).
rdar://180427686
Canonical link: https://commits.webkit.org/316185@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
