Bug 165908

Summary: Harden JSObject::getOwnPropertyDescriptor()
Product: WebKit Reporter: Chris Dumez <cdumez>
Component: JavaScriptCoreAssignee: Chris Dumez <cdumez>
Status: RESOLVED FIXED    
Severity: Normal CC: barraclough, commit-queue, ggaren, keith_miller, mark.lam, msaboff, saam
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description Chris Dumez 2016-12-15 12:00:45 PST 
Harden JSObject::getOwnPropertyDescriptor().
Comment 1 Chris Dumez 2016-12-15 12:01:24 PST 
Created attachment 297207 [details]
Patch
Comment 2 Geoffrey Garen 2016-12-15 12:07:12 PST 
Comment on attachment 297207 [details]
Patch

r=me
Comment 3 WebKit Commit Bot 2016-12-15 12:55:26 PST 
The commit-queue encountered the following flaky tests while processing attachment 297207 [details]:

fast/events/keyevent-iframe-removed-crash.html bug 165915 (authors: abarth@webkit.org and rniwa@webkit.org)
The commit-queue is continuing to process your patch.
Comment 4 WebKit Commit Bot 2016-12-15 12:55:54 PST 
Comment on attachment 297207 [details]
Patch

Clearing flags on attachment: 297207

Committed r209869: <http://trac.webkit.org/changeset/209869>
Comment 5 WebKit Commit Bot 2016-12-15 12:55:59 PST 
All reviewed patches have been landed.  Closing bug.