Bug 115943

Summary: SpeculativeJIT::checkArray should use the correct ExitKind
Product: WebKit Reporter: Mark Hahnenberg <mhahnenberg>
Component: JavaScriptCoreAssignee: Mark Hahnenberg <mhahnenberg>
Status: RESOLVED FIXED    
Severity: Normal CC: fpizlo
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch fpizlo: review+

Mark Hahnenberg
Reported 2013-05-10 16:19:55 PDT
Currently it uses Uncountable, which gives us no information if we end up exiting due to a mismatched ClassInfo pointer. It should instead use BadType and should pass the correct JSValueSource and Node instead of passing empty values.
Attachments
Patch (1.57 KB, patch)
2013-05-10 16:25 PDT, Mark Hahnenberg 		fpizlo: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Mark Hahnenberg
Comment 1 2013-05-10 16:25:31 PDT
Created attachment 201438 [details] Patch
Filip Pizlo
Comment 2 2013-05-10 16:26:06 PDT
Comment on attachment 201438 [details] Patch r=me
Filip Pizlo
Comment 3 2013-05-10 16:26:38 PDT
Branch, please.
Mark Hahnenberg
Comment 4 2013-05-11 16:25:55 PDT
Committed r149943: <http://trac.webkit.org/changeset/149943>
Note You need to log in before you can comment on or make changes to this bug.