<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>216117</bug_id>
          
          <creation_ts>2020-09-02 21:52:19 -0700</creation_ts>
          <short_desc>[JSC] We should not watch all toString / valueOf in JSObject::ordinaryToPrimitive</short_desc>
          <delta_ts>2020-09-09 21:53:15 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Yusuke Suzuki">ysuzuki</reporter>
          <assigned_to name="Yusuke Suzuki">ysuzuki</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1685171</commentid>
    <comment_count>0</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2020-09-02 21:52:19 -0700</bug_when>
    <thetext>1. If we do that for StringObjectStructures, then we do not need to do this here since DFG is currently only seeing StringObjectStructure.
2. Or, if DFG carefully checks toString or valueOf based on the context, then we do not need to watch here since toString / valueOf caching will watch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1687272</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2020-09-09 21:53:15 -0700</bug_when>
    <thetext>&lt;rdar://problem/68618575&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>