← WebKit — 2026-W39
7b485a76e9cc4b0e8dd03e5e904967b7a621c2b2 [JSC] Emit `op_construct_varargs` directly for `Reflect.construct` call sites
not a security fix
confidence 0.1
signal score 10.17
Source/JavaScriptCore/bytecode
Classified as not security-relevant.
Triage note: Adds ReflectConstructFunctionCallDotNode, a linkTimeConstant and bytecode fast path for Reflect.construct(target,args,newTarget) mirroring the Function.prototype.apply fast path, with guards (emitIsConstructor/emitIsObject). New optimization, not a fix of an existing bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds ReflectConstructFunctionCallDotNode, a linkTimeConstant and bytecode fast path for Reflect.construct(target,args,newTarget) mirroring the Function.prototype.apply fast path, with guards (emitIsConstructor/emitIsObject). New optimization, not a fix of an existing bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), msg_soft (+1.0), msg_feature (-1.0), area:Source/JavaScriptCore/bytecode (+2.5)
Before / after
Loading diff…
On This Page