Bug 165672

Summary: GC might be forced to look at a nuked object due to ordering of AllocatePropertyStorage, MaterializeNewObject, and PutStructure
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Status: RESOLVED FIXED    
Severity: Normal CC: ap, commit-queue, keith_miller, mark.lam, msaboff, saam
Priority: P2    
Version: WebKit Nightly Build   
Hardware: All   
OS: All   
Attachments:
Description Flags
the patch
none
the patch ggaren: review+

Filip Pizlo
Reported 2016-12-09 12:25:07 PST
Patch forthcoming.
Attachments
the patch (29.90 KB, patch)
2016-12-09 13:56 PST, Filip Pizlo 		no flags
DetailsFormatted DiffDiff
the patch (30.02 KB, patch)
2016-12-09 13:57 PST, Filip Pizlo 		ggaren: review+
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2016-12-09 13:56:26 PST
Created attachment 296691 [details] the patch
Filip Pizlo
Comment 2 2016-12-09 13:57:08 PST
Created attachment 296692 [details] the patch
Geoffrey Garen
Comment 3 2016-12-09 13:59:17 PST
Comment on attachment 296692 [details] the patch r=me
Filip Pizlo
Comment 4 2016-12-09 17:23:11 PST
Landed in https://trac.webkit.org/changeset/209638
Filip Pizlo
Comment 5 2016-12-11 17:17:19 PST
*** Bug 165674 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.