Summary: | JSWrapperMap's jsWrapperForObject() needs to keep weak prototype and constructors from being GCed | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Mark Lam <mark.lam> | ||||||
Component: | JavaScriptCore | Assignee: | Mark Lam <mark.lam> | ||||||
Status: | RESOLVED FIXED | ||||||||
Severity: | Normal | CC: | commit-queue, fpizlo, ggaren, mhahnenberg, mmirman, msaboff, oliver, webkit-bug-importer | ||||||
Priority: | P2 | Keywords: | InRadar | ||||||
Version: | 528+ (Nightly build) | ||||||||
Hardware: | Unspecified | ||||||||
OS: | Unspecified | ||||||||
Bug Depends on: | 135265 | ||||||||
Bug Blocks: | |||||||||
Attachments: |
|
Description
Mark Lam
2014-07-24 14:34:54 PDT
Created attachment 235463 [details]
the patch.
Thanks. Landed in r171527: <http://trac.webkit.org/r171527>. Re-opened since this is blocked by bug 135265 Created attachment 235478 [details]
patch 2: new fix that does not defer GC
Comment on attachment 235478 [details]
patch 2: new fix that does not defer GC
r=me
Thanks. New fix landed in r171564: <http://trac.webkit.org/r171564>. |