Josh Matthews d86d2a90aa script: Use rooted typed arrays in generated code and buffer source APIs (#41228) ...

There are two flavours of the mozjs `TypedArray<T>` wrapper for typed
array objects: one stores a `Box<Heap<*mut JSObject>>`, while the other
just has a bare `*mut JSObject`. The second one must only be stored
inside the `CustomAutoRoot` rooting values, but we were using it in many
other places like WebIDL dictionaries without rooting it safely. These
changes make our typed array APIs always use
`RootedTraceableBox<TypedArray<T>>` with the `Box<Heap<*mut JSObject>>`
flavour, which ensures that the JS object stored inside the typed array
wrapper is always visible to the SpiderMonkey GC.

Testing: Adds a new test that crashes without these changes.
Fixes: #41206

---------

Signed-off-by: Josh Matthews <josh@joshmatthews.net>

2025-12-12 14:33:45 +00:00

..

mod.rs

…

testbinding.rs

script: Use rooted typed arrays in generated code and buffer source APIs (#41228)

2025-12-12 14:33:45 +00:00

testbindingiterable.rs

…

testbindingmaplikewithinterface.rs

…

testbindingmaplikewithprimitive.rs

…

testbindingpairiterable.rs

…

testbindingproxy.rs

…

testbindingsetlikewithinterface.rs

…

testbindingsetlikewithprimitive.rs

…

testns.rs

…

testutils.rs

script/dom/: Change some #[allow]s to #[expect]s (#40454)

2025-11-06 11:06:03 +00:00

testworklet.rs

change some allows to expects (#41040)

2025-12-05 07:23:32 +00:00

testworkletglobalscope.rs

constellation: Reuse InitialScriptState and InitialPipelineState in UnprivilegedPipelineContent (#40529)

2025-11-10 11:41:59 +00:00