[JSC] TypedArray setFromTypedArray cannot use memmove when region is intentionally overlapping and spec algorithm read back the modified result - #72765

1c95fcd

[JSC] TypedArray setFromTypedArray cannot use memmove when region is intentionally overlapping and spec algorithm read back the modified result
https://bugs.webkit.org/show_bug.cgi?id=322892
rdar://186145219

Reviewed by NOBODY (OOPS!).

TypedArray setFromTypedArray cannot use memmove when

1. region is overlapping
2. we end up reading the written result

memmove can avoid (2) by changing the scanning direction. But the spec algorithm
sometimes explicitly requests CopyType::LeftToRight, and in this case,
this reading the written value should be observable.

Test: JSTests/stress/typed-array-slice-species-same-buffer-overlap.js

* JSTests/stress/typed-array-slice-species-same-buffer-overlap.js: Added.
(shouldBe):
(fill):
(bytesOf):
(const.TA.of.constructors.resultIndex.elementCount.ta.Symbol.species):
(const.TA.of.constructors.resultIndex.elementCount):
(const.TA.of.constructors.targetIndex.elementCount):
* JSTests/test262/expectations.yaml:
* Source/JavaScriptCore/runtime/JSGenericTypedArrayViewInlines.h:
(JSC::JSGenericTypedArrayView<Adaptor>::setFromTypedArray):

1c95fcd

Misc	iOS, visionOS, tvOS & watchOS	macOS	Linux	Windows	Apple Internal
❌ 🧪 style	✅ 🛠 ios	✅ 🛠 mac	✅ 🛠 wpe	❌ 🛠 win	⏳ 🛠 ios-apple
	✅ 🛠 ios-sim	✅ 🛠 mac-AS-debug	✅ 🧪 wpe-wk2	❌ 🧪 win-tests	⏳ 🛠 mac-apple
✅ 🧪 webkitperl	✅ 🧪 ios-wk2	✅ 🧪 api-mac	✅ 🧪 api-wpe		⏳ 🛠 vision-apple
	✅ 🧪 ios-wk2-wpt	✅ 🧪 api-mac-debug	✅ 🧪 jsc-wpe
✅ 🧪 jsc-x86-64	✅ 🧪 api-ios	✅ 🧪 mac-wk2	✅ 🛠 gtk3-gcc
✅ 🛠 🧪 jsc-debug-arm64	🛠 ios-safer-cpp	✅ 🧪 mac-AS-debug-wk2	✅ 🛠 gtk
	✅ 🛠 vision		✅ 🧪 gtk-wk2
	✅ 🛠 vision-sim	✅ 🧪 mac-intel-wk2	✅ 🧪 api-gtk
	✅ 🧪 vision-wk2	✅ 🛠 mac-safer-cpp	✅ 🛠 playstation
	✅ 🛠 tv	✅ 🧪 mac-site-isolation
	✅ 🛠 tv-sim
	✅ 🛠 watch
	✅ 🛠 watch-sim