<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>77273</bug_id>
          
          <creation_ts>2012-01-28 00:35:17 -0800</creation_ts>
          <short_desc>GC invoked while doing an old JIT property storage reallocation may lead to an object that refers to a dead structure</short_desc>
          <delta_ts>2012-01-28 02:18:51 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Filip Pizlo">fpizlo</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>544633</commentid>
    <comment_count>0</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2012-01-28 00:35:17 -0800</bug_when>
    <thetext>Patch forthcoming.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>544636</commentid>
    <comment_count>1</comment_count>
      <attachid>124433</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2012-01-28 00:53:08 -0800</bug_when>
    <thetext>Created attachment 124433
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>544640</commentid>
    <comment_count>2</comment_count>
      <attachid>124433</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-01-28 02:18:47 -0800</bug_when>
    <thetext>Comment on attachment 124433
the patch

Clearing flags on attachment: 124433

Committed r106185: &lt;http://trac.webkit.org/changeset/106185&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>544641</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-01-28 02:18:51 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>124433</attachid>
            <date>2012-01-28 00:53:08 -0800</date>
            <delta_ts>2012-01-28 02:18:47 -0800</delta_ts>
            <desc>the patch</desc>
            <filename>fixtransition_patch_1.diff</filename>
            <type>text/plain</type>
            <size>4377</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>