← WebKit — 2026-W38
a5bfdb3aaf30433058dc5b318d82f1dd7b9e4584 [JSC] Read `Error.stackTraceLimit` from the `Error` constructor when capturing a stack
not a security fix
confidence 0.15
signal score 6.25
Source/JavaScriptCore/runtime
Classified as not security-relevant.
Triage note: Removes m_stackTraceLimit and the ErrorConstructor put/deleteProperty overrides, computing stackTraceLimit() live from the errorConstructor's own property; a refactor removing a cached-value sync hazard, no concrete bug demonstrated.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Removes m_stackTraceLimit and the ErrorConstructor put/deleteProperty overrides, computing stackTraceLimit() live from the errorConstructor's own property; a refactor removing a cached-value sync hazard, no concrete bug demonstrated.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: null_guard (+1.95), clamp_saturate (+1.8), area:Source/JavaScriptCore/runtime (+2.5)
Before / after
Loading diff…
On This Page