Bug 178110

Summary: JSCell::didBecomePrototype is racy
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Status: RESOLVED FIXED    
Severity: Normal CC: buildbot, keith_miller, mark.lam, msaboff, saam, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: All   
OS: All   
Attachments:
Description Flags
the patch saam: review+

Filip Pizlo
Reported 2017-10-09 19:12:37 PDT
Patch forthcoming.
Attachments
the patch (1.40 KB, patch)
2017-10-09 19:13 PDT, Filip Pizlo 		saam: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2017-10-09 19:13:43 PDT
Created attachment 323270 [details] the patch
Filip Pizlo
Comment 2 2017-10-09 19:48:56 PDT
Landed in https://trac.webkit.org/changeset/223116/webkit
Radar WebKit Bug Importer
Comment 3 2017-10-09 19:49:51 PDT
<rdar://problem/34901632>
Note You need to log in before you can comment on or make changes to this bug.