Bug 308483
| Summary: | [libpas] Tag-on-alloc segregated objects even for retag-on-scavenge | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Marcus Plutowski <marcus_plutowski> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Marcus Plutowski
rdar://171007509
This is a bandaid to reduce the impact of certain issues that can result in backing tagged memory being zeroed in the interim between freeing the object and re-allocating it.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Marcus Plutowski
Pull request: https://github.com/WebKit/WebKit/pull/59253
EWS
Committed 308769@main (b754353fb35e): <https://commits.webkit.org/308769@main>
Reviewed commits have been landed. Closing PR #59253 and removing active labels.