Summary: | REGRESSION: jQuery load() issue. | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Ashley Williams <a.j.r.williams> | ||||
Component: | JavaScriptCore | Assignee: | Gavin Barraclough <barraclough> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | abarth, ahaeusler, ap, oliver | ||||
Priority: | P1 | Keywords: | InRadar, NeedsReduction, Regression | ||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Mac | ||||||
OS: | OS X 10.5 | ||||||
Attachments: |
|
Description
Ashley Williams
2009-05-23 17:59:27 PDT
I do not see an obvious culprit in this range. Could be a result of some JavaScript changes, or of abarth's ResourceRequest ones. I haven't tried to reproduce this yet. Seeing an assertion failure in JavaScript on a debug build: ASSERTION FAILED: result == JSValue(callee) (/Users/ap/Safari/OpenSource/JavaScriptCore/jit/JITStubs.cpp:745 static void* JSC::JITStubs::cti_op_get_by_id_method_check_second(void*, ...)) Created attachment 30692 [details]
Fix
Method call caching was failing to clear the cached value when overwriting a property in a dictionary.
No performance impact.
Comment on attachment 30692 [details]
Fix
Correct the changelog so that it looks like it was written by someone who knows english and r=me
Sending JavaScriptCore/ChangeLog Sending JavaScriptCore/JavaScriptCore.exp Sending JavaScriptCore/jit/JITStubs.cpp Sending JavaScriptCore/runtime/JSObject.h Sending JavaScriptCore/runtime/Structure.cpp Sending JavaScriptCore/runtime/Structure.h Transmitting file data ...... Committed revision 44171. |