<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>118223</bug_id>
          
          <creation_ts>2013-06-30 11:57:15 -0700</creation_ts>
          <short_desc>JSTypedArrays leak their underlying buffers</short_desc>
          <delta_ts>2014-04-29 15:25:59 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>INVALID</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Mark Hahnenberg">mhahnenberg</reporter>
          <assigned_to name="Mark Hahnenberg">mhahnenberg</assigned_to>
          <cc>feross</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>904900</commentid>
    <comment_count>0</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-06-30 11:57:15 -0700</bug_when>
    <thetext>In JSCTypedArrayStubs.h, the generated stubs inherit from JSDestructibleObject because they have a RefPtr to their backing buffers. However, they don&apos;t provide their own destroy/destructor combo. Due to this, the RefPtr destructor is never called and we leak all backing buffers for these objects. This issue only affects the jsc command line environment, but it would still be nice to fix this while we still have to keep these hacky TypedArray stubs in JSC.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1005170</commentid>
    <comment_count>1</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2014-04-29 15:25:59 -0700</bug_when>
    <thetext>We reimplemented typed arrays in JSC which invalidated this bug.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>