← WebKit — 2026-W35

48985e195c6fddb7395ad65e72a7614f12366ae2  [JSC] Store the DFG `VariableEventStream` as a byte stream

not a security fix confidence 0.1 signal score 6.97 Source/JavaScriptCore/dfg
Classified as not security-relevant.
Triage note: Re-encodes the variable-event stream as bytes with reset-offset index and adds LEBEncoder.h; a memory/perf refactor. decodeUInt32OrCrash/RELEASE_ASSERT(offset==index) are self-consistency checks on self-produced data, not a bug fix.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: security_assert (+6.47), area:Source/JavaScriptCore/dfg (+2.5), large_churn (-2.0)

Before / after

Loading diff…
On This Page