mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-26 01:35:08 +02:00
114eeddea1
The x86_64 asm interpreter mapped t8 to r11, but store_operand also used r11 as its scratch register for operand loads. When a handler stored a JS value from t8, the scratch load overwrote the value first and wrote raw operand bits into the register file.