Bug 23144

Summary: ScopeChain::push/pop look suspiciously unsafe
Product: WebKit Reporter: Oliver Hunt <oliver>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: zwarich
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.5   

Description Oliver Hunt 2009-01-06 12:18:28 PST 
Title says it all -- m_node is refed on construct, and deref'd in the destructor,m but push/pop don't appear to propagate this ref
Comment 1 Oliver Hunt 2011-05-01 19:49:34 PDT 
scopechainnode is now gc allocated so no manual ref/deref