Bug 132079

Summary:

Arguments::copyBackingStore needs to update m_registers in tandem with m_registerArray

Product:

WebKit

Reporter:

Mark Hahnenberg <mhahnenberg>

Component:

JavaScriptCore

Assignee:

Mark Hahnenberg <mhahnenberg>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue

Priority:

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none

Description Mark Hahnenberg 2014-04-23 14:50:06 PDT

Since we're moving the register backing store, we don't want to leave a dangling pointer into a random CopiedBlock.

Comment 1 Mark Hahnenberg 2014-04-23 14:51:59 PDT

<rdar://problem/16689343>

Comment 2 Mark Hahnenberg 2014-04-23 14:55:53 PDT

Created attachment 230012 [details]
Patch

Comment 3 Michael Saboff 2014-04-23 15:01:01 PDT

Comment on attachment 230012 [details]
Patch

r=me

Comment 4 WebKit Commit Bot 2014-04-23 15:35:44 PDT

Comment on attachment 230012 [details]
Patch

Clearing flags on attachment: 230012

Committed r167729: <http://trac.webkit.org/changeset/167729>

Comment 5 WebKit Commit Bot 2014-04-23 15:35:46 PDT

All reviewed patches have been landed.  Closing bug.