Bug 232414

Summary: Don't call type() on Structure, instead call type() on its typeInfo()
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED FIXED    
Severity: Normal CC: ews-watchlist, keith_miller, mark.lam, msaboff, tzagallo, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
ysuzuki: review+
patch for landing
ews-feeder: commit-queue-
patch for landing none

Description Saam Barati 2021-10-27 18:03:38 PDT 
...
Comment 1 Saam Barati 2021-10-27 19:31:26 PDT 
Created attachment 442666 [details]
Patch
Comment 2 Yusuke Suzuki 2021-10-27 19:41:53 PDT 
Comment on attachment 442666 [details]
Patch

r=me
I also found several other places `structure->type() == JSType::ArrayType` in DFGOperations.cpp. Can you fix it too?
Comment 3 Saam Barati 2021-10-27 19:53:03 PDT 
Created attachment 442668 [details]
patch for landing
Comment 4 Saam Barati 2021-10-28 09:56:39 PDT 
Created attachment 442713 [details]
patch for landing
Comment 5 EWS 2021-10-28 14:22:42 PDT 
Committed r285004 (243650@main): <https://commits.webkit.org/243650@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 442713 [details].
Comment 6 Radar WebKit Bug Importer 2021-10-28 14:23:19 PDT 
<rdar://problem/84778008>