Bug 211820

Summary: MovHint can see an arguments object be MovHinted to a Tmp
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED FIXED    
Severity: Normal CC: benjamin, fpizlo, ggaren, gskachkov, guijemont, keith_miller, mark.lam, msaboff, rmorisset, ross.kirsling, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch none

Saam Barati
Reported 2020-05-12 17:25:01 PDT
Let's not assert it's not possible
Attachments
patch (4.30 KB, patch)
2020-05-12 17:42 PDT, Saam Barati 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Saam Barati
Comment 1 2020-05-12 17:27:25 PDT
<rdar://problem/62882158>
Saam Barati
Comment 2 2020-05-12 17:42:39 PDT
Created attachment 399209 [details] patch
Keith Miller
Comment 3 2020-05-12 17:45:14 PDT
Comment on attachment 399209 [details] patch r=me.
EWS
Comment 4 2020-05-13 00:24:17 PDT
Committed r261603: <https://trac.webkit.org/changeset/261603> All reviewed patches have been landed. Closing bug and clearing flags on attachment 399209 [details].
Note You need to log in before you can comment on or make changes to this bug.