Bug 156516

Summary: AbstractValue should use the result type to filter structures
Product: WebKit Reporter: Keith Miller <keith_miller>
Component: New BugsAssignee: Keith Miller <keith_miller>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, mark.lam, msaboff, saam
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch ggaren: review+, ggaren: commit-queue-

Description Keith Miller 2016-04-12 13:58:33 PDT 
AbstractValue should use the result type to filter structures
Comment 1 Keith Miller 2016-04-12 14:01:24 PDT 
Created attachment 276273 [details]
Patch
Comment 2 Geoffrey Garen 2016-04-12 14:03:35 PDT 
Comment on attachment 276273 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=276273&action=review

r=me

> Source/JavaScriptCore/ChangeLog:8
> +        When filtering filtering an AbstractValue with a SpeculatedType we would not

filtering

> Source/JavaScriptCore/ChangeLog:10
> +        comment directly above said). This would cause us to crash if the our structure

our
Comment 3 Keith Miller 2016-04-12 14:52:02 PDT 
Committed r199391: <http://trac.webkit.org/changeset/199391>