← WebKit — 2026-W36

cbd15fc88bdeffb4618a464681e03ef1f25bc5b6  [JSC] Add Karatsuba multiplication to `JSBigInt`

not a security fix confidence 0.1 signal score 10.82 Source/JavaScriptCore/runtime
Classified as not security-relevant.
Triage note: New performance feature porting V8/Go Karatsuba multiplication (multiplyKaratsuba/karatsubaMain/karatsubaChunk) gated behind a size threshold in multiplyDigitsInto. It is span-based with ASSERT/RELEASE_ASSERT bounds and introduces a new algorithm rather than fixing an identified memory-safety or logic bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: security_assert (+3.0), bounds_guard (+4.32), null_guard (+1.2), clamp_saturate (+1.8), area:Source/JavaScriptCore/runtime (+2.5), large_churn (-2.0)

Before / after

Loading diff…
On This Page