Bug 69075

Summary:

bug fixes for CreateThis, NewObject and GetByOffset in JSVALUE32_64 DFG JIT

Product:

WebKit

Reporter:

Yuqiang Xian <yuqiang.xian>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, webkit.review.bot

Priority:

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
the patch	none

Description Yuqiang Xian 2011-09-29 02:02:03 PDT

Arguments are not passed correctly for CreateThis and NewObject. The child node is incorrectly "used" by twice for GetbyOffset.

Comment 1 Yuqiang Xian 2011-09-29 02:05:23 PDT

Created attachment 109136 [details]
the patch

Comment 2 WebKit Review Bot 2011-09-29 12:06:47 PDT

Comment on attachment 109136 [details]
the patch

Clearing flags on attachment: 109136

Committed r96344: <http://trac.webkit.org/changeset/96344>

Comment 3 WebKit Review Bot 2011-09-29 12:06:51 PDT

All reviewed patches have been landed.  Closing bug.