Bug 121330

Summary: DFG AI assumes that ToThis can never return non-object if it is passed an object, and operationToThis will get the wrong value of isStrictMode() if there's inlining
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Severity: Normal CC: barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver, sam, vicki
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Description Flags
the patch oliver: review+

Description Filip Pizlo 2013-09-13 16:10:32 PDT
Patch forthcoming.
Comment 1 Filip Pizlo 2013-09-13 16:12:25 PDT
Created attachment 211599 [details]
the patch
Comment 2 Filip Pizlo 2013-09-13 16:17:41 PDT
Landed in http://trac.webkit.org/changeset/155730
Comment 3 Mark Lam 2013-09-19 12:25:04 PDT
*** Bug 121193 has been marked as a duplicate of this bug. ***