JSGenericTypedArrayView::set() should check for exceptions.
authormark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 26 Oct 2016 19:23:55 +0000 (19:23 +0000)
committermark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 26 Oct 2016 19:23:55 +0000 (19:23 +0000)
commit326cacdc37f712061676ce5451b7a45417ff72bf
tree6da06a392763998d25c9828869fa78e76f77ce6a
parente033dc22db18a2b80218df46f0d7196300c7c281
JSGenericTypedArrayView::set() should check for exceptions.
https://bugs.webkit.org/show_bug.cgi?id=164007
<rdar://problem/28853775>

Reviewed by Filip Pizlo.

JSTests:

* stress/typed-array-view-set-should-not-crash-on-exception.js: Added.

Source/JavaScriptCore:

* runtime/JSGenericTypedArrayViewInlines.h:
(JSC::JSGenericTypedArrayView<Adaptor>::set):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@207906 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JSTests/ChangeLog
JSTests/stress/typed-array-view-set-should-not-crash-on-exception.js [new file with mode: 0644]
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/JSGenericTypedArrayViewInlines.h