← WebKit — 2026-W38
d2cffa902fbaec6a7b4ef196aab9c7e9a4e61a2e [JSC] StructuredCloning code should include ArrayBuffers
not a security fix
confidence 0.15
signal score 17.75
Source/JavaScriptCore/runtime
Classified as not security-relevant.
Triage note: Introduces CloneSerializerBase/CloneDeserializerBase and side-channel structs shared by WebCore SerializedScriptValue and the jsc shell; the isOutOfBounds()/ValidationError checks are moved, not added, so this is a code-sharing refactor with no new bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Introduces CloneSerializerBase/CloneDeserializerBase and side-channel structs shared by WebCore SerializedScriptValue and the jsc shell; the isOutOfBounds()/ValidationError checks are moved, not added, so this is a code-sharing refactor with no new bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), security_assert (+4.87), bounds_guard (+4.32), null_guard (+2.59), msg_feature (-1.0), area:Source/JavaScriptCore/runtime (+2.5), large_churn (-2.0)
Before / after
Loading diff…
On This Page