Bug 159501

Summary: ToThis constant folding in DFG is incorrect when the structure indicates that toThis is overridden
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED FIXED    
Severity: Normal CC: benjamin, commit-queue, fpizlo, ggaren, gskachkov, keith_miller, mark.lam, msaboff, oliver, sukolsak, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch none

Saam Barati
Reported 2016-07-06 19:07:42 PDT
...
Attachments
patch (2.95 KB, patch)
2016-07-07 13:59 PDT, Saam Barati 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Saam Barati
Comment 1 2016-07-06 19:08:10 PDT
<rdar://problem/27109354>
Saam Barati
Comment 2 2016-07-07 13:59:56 PDT
Created attachment 283046 [details] patch
Mark Lam
Comment 3 2016-07-07 14:02:35 PDT
Comment on attachment 283046 [details] patch r=me
WebKit Commit Bot
Comment 4 2016-07-07 15:15:42 PDT
Comment on attachment 283046 [details] patch Clearing flags on attachment: 283046 Committed r202936: <http://trac.webkit.org/changeset/202936>
WebKit Commit Bot
Comment 5 2016-07-07 15:15:47 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.