Bug 183942

Summary: LLInt TypeArray pointer poisoning should not pick its poison dynamically.
Product: WebKit Reporter: Mark Lam <mark.lam>
Component: JavaScriptCoreAssignee: Mark Lam <mark.lam>
Status: RESOLVED FIXED    
Severity: Normal CC: fpizlo, jfbastien, keith_miller, msaboff, rmorisset, saam, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
proposed patch. jfbastien: review+

Description Mark Lam 2018-03-23 10:24:32 PDT
Patch coming.
Comment 1 Radar WebKit Bug Importer 2018-03-23 10:25:25 PDT
<rdar://problem/38798018>
Comment 2 Mark Lam 2018-03-23 10:40:31 PDT
Created attachment 336387 [details]
proposed patch.
Comment 3 JF Bastien 2018-03-23 10:46:13 PDT
Comment on attachment 336387 [details]
proposed patch.

r=me
Comment 4 Mark Lam 2018-03-23 11:56:29 PDT
Thanks for the review.  Landed in r229912: <http://trac.webkit.org/r229912>.