Bug 123760

Summary:

DFG NewArray/NewArrayBuffer shouldn't be constructing with negative indexing

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Filip Pizlo <fpizlo>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver, sam, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	oliver: review+

Filip Pizlo

Reported 2013-11-04 15:54:49 PST

Since they always use a forward-indexed scratch buffer. <rdar://problem/15356705>

Attachments
the patch (6.74 KB, patch) 2013-11-04 15:58 PST, Filip Pizlo	oliver: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Filip Pizlo

Comment 1 2013-11-04 15:58:38 PST

Filip Pizlo

Comment 2 2013-11-04 16:03:22 PST

Note You need to log in before you can comment on or make changes to this bug.