From 88130c06a6e400836200791cfa2c75a16a528619 Mon Sep 17 00:00:00 2001
From: Fabrice Bellard <fabrice@bellard.org>
Date: Sat, 7 Nov 2026 12:12:29 +0100
Subject: [PATCH] correctly seal template objects when deserializing them
 (#598)

---
 quickjs.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/quickjs.c b/quickjs.c
index ccd86d4..d4ab4c3 100644
--- a/quickjs.c
+++ b/quickjs.c
@@ -40313,7 +40313,8 @@ static JSValue JS_ReadArray(BCReaderState *s, int tag)
             if (ret < 0)
                 goto fail;
         }
-        JS_PreventExtensions(ctx, obj);
+        if (seal_template_obj(ctx, obj))
+            goto fail;
     }
     return obj;
  fail:
-- 
2.47.3