Bug 123270

Summary: Uninitialized member causes crash when DFG JIT is not enabled.
Product: WebKit Reporter: peavo
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, commit-queue, fpizlo
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: Unspecified   
Attachments:
Description Flags
Patch none

peavo
Reported 2013-10-24 07:14:37 PDT
The data member sizeOfLastScratchBuffer in the VM class is only initialized if DFG JIT is enabled, even though it's defined regardless. This causes an early crash on Windows, which doesn't have DFG JIT enabled.
Attachments
Patch (1.46 KB, patch)
2013-10-24 07:19 PDT, peavo 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
peavo
Comment 1 2013-10-24 07:19:12 PDT
Created attachment 215063 [details] Patch
Brent Fulgham
Comment 2 2013-10-24 09:01:39 PDT
Comment on attachment 215063 [details] Patch r=me
WebKit Commit Bot
Comment 3 2013-10-24 09:05:12 PDT
Comment on attachment 215063 [details] Patch Clearing flags on attachment: 215063 Committed r157930: <http://trac.webkit.org/changeset/157930>
WebKit Commit Bot
Comment 4 2013-10-24 09:05:14 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.