← WebKit — 2026-W41
e2ffc55c56bd78ac2243d1e26c7844ef731df53c [JSC] Add divide-and-conquer `toString` to `JSBigInt`
not a security fix
confidence 0.1
signal score 6.95
Source/JavaScriptCore/runtime
Classified as not security-relevant.
Triage note: Adds JSBigInt::ToStringFormatter implementing an O(n log^2 n) toString path for large BigInts (threshold 12). This is new performance feature code with span-bounded buffers, not a fix to an existing memory-safety or logic bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds JSBigInt::ToStringFormatter implementing an O(n log^2 n) toString path for large BigInts (threshold 12). This is new performance feature code with span-bounded buffers, not a fix to an existing memory-safety or logic bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: bounds_guard (+3.25), null_guard (+1.2), area:Source/JavaScriptCore/runtime (+2.5)
Before / after
Loading diff…
On This Page