← WebKit — 2026-W37
4fa7b55ae4c6485fcdef946f98b692bff1a2fcc6 [JSC] eval call should recognize tail-position
not a security fix
confidence 0.2
signal score 6.17
Source/JavaScriptCore/bytecompiler
Classified as not security-relevant.
Triage note: Disables m_allowTailCallOptimization for generator/async-function/async-generator bodies (a tail call would jump over the await) and adds a tail-call path for a non-eval callee named 'eval'. ECMAScript tail-position semantics correctness fix; no evidence of a memory-safety/exploitable miscompile in the diff.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Disables m_allowTailCallOptimization for generator/async-function/async-generator bodies (a tail call would jump over the await) and adds a tail-call path for a non-eval callee named 'eval'. ECMAScript tail-position semantics correctness fix; no evidence of a memory-safety/exploitable miscompile in the diff.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+4.87), surgical (+1.3)
Before / after
Loading diff…
On This Page