<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>231976</bug_id>
          
          <creation_ts>2021-10-19 12:39:25 -0700</creation_ts>
          <short_desc>canDoFastSpread should also check that the Structure is from the global object we&apos;re watching</short_desc>
          <delta_ts>2021-10-22 11:23:20 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Saam Barati">saam</reporter>
          <assigned_to name="Saam Barati">saam</assigned_to>
          <cc>ews-watchlist</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>tzagallo</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1806233</commentid>
    <comment_count>0</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 12:39:25 -0700</bug_when>
    <thetext>...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806235</commentid>
    <comment_count>1</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 12:40:34 -0700</bug_when>
    <thetext>&lt;rdar://84340372&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806252</commentid>
    <comment_count>2</comment_count>
      <attachid>441776</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 12:54:27 -0700</bug_when>
    <thetext>Created attachment 441776
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806261</commentid>
    <comment_count>3</comment_count>
      <attachid>441776</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2021-10-19 13:05:10 -0700</bug_when>
    <thetext>Comment on attachment 441776
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=441776&amp;action=review

&gt; Source/JavaScriptCore/dfg/DFGGraph.cpp:1852
&gt; +            &amp;&amp; structure-&gt;globalObject() == globalObject
&gt;              &amp;&amp; structure-&gt;storedPrototype() == arrayPrototype

Nit: Can we invert these two lines?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806361</commentid>
    <comment_count>4</comment_count>
      <attachid>441776</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 15:13:37 -0700</bug_when>
    <thetext>Comment on attachment 441776
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=441776&amp;action=review

&gt;&gt; Source/JavaScriptCore/dfg/DFGGraph.cpp:1852
&gt;&gt;              &amp;&amp; structure-&gt;storedPrototype() == arrayPrototype
&gt; 
&gt; Nit: Can we invert these two lines?

What&apos;s your thinking? The current code actually reads more clearly to me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806383</commentid>
    <comment_count>5</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-10-19 15:48:33 -0700</bug_when>
    <thetext>Committed r284506 (243252@main): &lt;https://commits.webkit.org/243252@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 441776.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806412</commentid>
    <comment_count>6</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 17:05:07 -0700</bug_when>
    <thetext>Will fix Keith&apos;s nit.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806415</commentid>
    <comment_count>7</comment_count>
      <attachid>441820</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2021-10-19 17:11:43 -0700</bug_when>
    <thetext>Created attachment 441820
follow up</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1806615</commentid>
    <comment_count>8</comment_count>
      <attachid>441820</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2021-10-20 08:10:26 -0700</bug_when>
    <thetext>Comment on attachment 441820
follow up

r=me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1807784</commentid>
    <comment_count>9</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-10-22 11:23:17 -0700</bug_when>
    <thetext>Committed r284699 (243416@main): &lt;https://commits.webkit.org/243416@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 441820.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>441776</attachid>
            <date>2021-10-19 12:54:27 -0700</date>
            <delta_ts>2021-10-19 15:48:34 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>c-backup.diff</filename>
            <type>text/plain</type>
            <size>1714</size>
            <attacher name="Saam Barati">saam</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>441820</attachid>
            <date>2021-10-19 17:11:43 -0700</date>
            <delta_ts>2021-10-22 11:23:19 -0700</delta_ts>
            <desc>follow up</desc>
            <filename>c-backup.diff</filename>
            <type>text/plain</type>
            <size>1609</size>
            <attacher name="Saam Barati">saam</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjg0NTEwKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBA
CisyMDIxLTEwLTE5ICBTYWFtIEJhcmF0aSAgPHNiYXJhdGlAYXBwbGUuY29tPgorCisgICAgICAg
IGNhbkRvRmFzdFNwcmVhZCBzaG91bGQgYWxzbyBjaGVjayB0aGF0IHRoZSBTdHJ1Y3R1cmUgaXMg
ZnJvbSB0aGUgZ2xvYmFsIG9iamVjdCB3ZSdyZSB3YXRjaGluZworICAgICAgICBodHRwczovL2J1
Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjMxOTc2CisgICAgICAgIDxyZGFyOi8vODQz
NDAzNzI+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg
SnVzdCByZW9yZGVyIHRoZSBjaGVja3MgZm9yIGNsYXJpdHkuCisKKyAgICAgICAgKiBkZmcvREZH
R3JhcGguY3BwOgorICAgICAgICAoSlNDOjpERkc6OkdyYXBoOjpjYW5Eb0Zhc3RTcHJlYWQpOgor
CiAyMDIxLTEwLTE5ICBBbGV4ZXkgUHJvc2t1cnlha292ICA8YXBAYXBwbGUuY29tPgogCiAgICAg
ICAgIEVhZ2VybHkgcmVzb2x2ZSBweXRob24zIHBhdGggaW4gTWFrZWZpbGVzCkluZGV4OiBTb3Vy
Y2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR0dyYXBoLmNwcAo9PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2Uv
SmF2YVNjcmlwdENvcmUvZGZnL0RGR0dyYXBoLmNwcAkocmV2aXNpb24gMjg0NTEwKQorKysgU291
cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdHcmFwaC5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTE4
NDcsOCArMTg0Nyw4IEBAIGJvb2wgR3JhcGg6OmNhbkRvRmFzdFNwcmVhZChOb2RlKiBub2RlLCAK
ICAgICBBcnJheVByb3RvdHlwZSogYXJyYXlQcm90b3R5cGUgPSBnbG9iYWxPYmplY3QtPmFycmF5
UHJvdG90eXBlKCk7CiAgICAgYm9vbCBhbGxHb29kID0gdHJ1ZTsKICAgICB2YWx1ZS5tX3N0cnVj
dHVyZS5mb3JFYWNoKFsmXSAoUmVnaXN0ZXJlZFN0cnVjdHVyZSBzdHJ1Y3R1cmUpIHsKLSAgICAg
ICAgYWxsR29vZCAmPSBzdHJ1Y3R1cmUtPmhhc01vbm9Qcm90bygpCi0gICAgICAgICAgICAmJiBz
dHJ1Y3R1cmUtPmdsb2JhbE9iamVjdCgpID09IGdsb2JhbE9iamVjdAorICAgICAgICBhbGxHb29k
ICY9IHN0cnVjdHVyZS0+Z2xvYmFsT2JqZWN0KCkgPT0gZ2xvYmFsT2JqZWN0IAorICAgICAgICAg
ICAgJiYgc3RydWN0dXJlLT5oYXNNb25vUHJvdG8oKQogICAgICAgICAgICAgJiYgc3RydWN0dXJl
LT5zdG9yZWRQcm90b3R5cGUoKSA9PSBhcnJheVByb3RvdHlwZQogICAgICAgICAgICAgJiYgIXN0
cnVjdHVyZS0+aXNEaWN0aW9uYXJ5KCkKICAgICAgICAgICAgICYmIHN0cnVjdHVyZS0+Z2V0Q29u
Y3VycmVudGx5KG1fdm0ucHJvcGVydHlOYW1lcy0+aXRlcmF0b3JTeW1ib2wuaW1wbCgpKSA9PSBp
bnZhbGlkT2Zmc2V0Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>