Bug 82947

Summary: Activation tear-off neglects to copy the callee and scope chain, leading to crashes if we try to create an arguments object from the activation
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Severity: Normal Keywords: InRadar
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Description Flags
the patch none

Description Filip Pizlo 2012-04-02 14:27:46 PDT
Patch forthcoming.

Comment 1 Filip Pizlo 2012-04-02 14:29:26 PDT
Created attachment 135186 [details]
the patch
Comment 2 Filip Pizlo 2012-04-02 14:52:00 PDT
Reviewed by Gavin in person.
Comment 3 Filip Pizlo 2012-04-02 14:53:39 PDT
Landed in http://trac.webkit.org/changeset/112947