<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>119458</bug_id>
          
          <creation_ts>2013-08-02 13:41:15 -0700</creation_ts>
          <short_desc>Incorrect type speculation reported by ToPrimitive</short_desc>
          <delta_ts>2013-08-02 15:37:21 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Oliver Hunt">oliver</reporter>
          <assigned_to name="Oliver Hunt">oliver</assigned_to>
          <cc>mhahnenberg</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>914257</commentid>
    <comment_count>0</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-08-02 13:41:15 -0700</bug_when>
    <thetext>Incorrect type speculation reported by ToPrimitive</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914259</commentid>
    <comment_count>1</comment_count>
      <attachid>208043</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-08-02 13:42:26 -0700</bug_when>
    <thetext>Created attachment 208043
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914294</commentid>
    <comment_count>2</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-08-02 14:58:12 -0700</bug_when>
    <thetext>What&apos;s the steps to repro the crash?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914295</commentid>
    <comment_count>3</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-08-02 15:00:41 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; What&apos;s the steps to repro the crash?

&lt;rdar://problem/14580940&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914304</commentid>
    <comment_count>4</comment_count>
      <attachid>208043</attachid>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-08-02 15:33:55 -0700</bug_when>
    <thetext>Comment on attachment 208043
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914305</commentid>
    <comment_count>5</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-08-02 15:37:21 -0700</bug_when>
    <thetext>Committed r153674: &lt;http://trac.webkit.org/changeset/153674&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>208043</attachid>
            <date>2013-08-02 13:42:26 -0700</date>
            <delta_ts>2013-08-02 15:33:55 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-119458-20130802134447.patch</filename>
            <type>text/plain</type>
            <size>1804</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTUzNjY0CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>
<flag name="review"
          id="229907"
          type_id="1"
          status="+"
          setter="mhahnenberg"
    />
          </attachment>
      

    </bug>

</bugzilla>