WebKit - TypedArray.fill Memory Corruption

length; unsigned begin = argumentClampedIndexFromStartOrEndexec, 1, length; unsigned end = argumentClampedIndexFromStartOrEndexec, 2, length, length; if end thisValue; if !thisObject-setRangeToValueexec, begin, end, valueToInsert return JSValue::encodejsUndefined; argumentClampedIndexFromStartOrE...

WebKit - TypedArray.fill Memory Corruption

WebKit - TypedArray.fill Memory Corruption length; unsigned begin = argumentClampedIndexFromStartOrEndexec, 1, length; unsigned end = argumentClampedIndexFromStartOrEndexec, 2, length, length; if end thisValue; if !thisObject-setRangeToValueexec, begin, end, valueToInsert return...