Commit 6455ef40 authored by Steve Fink's avatar Steve Fink
Browse files

Bug 1885779 - Canonicalize BigInts read through structured clone a=RyanVM

parent 013728f2
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
@@ -398,6 +398,7 @@ class BigInt final : public js::gc::CellWithLengthAndFlags {
  static JSLinearString* toStringGeneric(JSContext* cx, Handle<BigInt*>,
                                         unsigned radix);

  friend struct ::JSStructuredCloneReader; // So it can call the following:
  static BigInt* destructivelyTrimHighZeroDigits(JSContext* cx, BigInt* x);

  bool absFitsInUint64() const { return digitLength() <= 64 / DigitBits; }
+1 −1
Original line number Diff line number Diff line
@@ -2489,7 +2489,7 @@ BigInt* JSStructuredCloneReader::readBigInt(uint32_t data) {
  if (!in.readArray(result->digits().data(), length)) {
    return nullptr;
  }
  return result;
  return JS::BigInt::destructivelyTrimHighZeroDigits(context(), result);
}

static uint32_t TagToV1ArrayType(uint32_t tag) {