Summary: | Do not abuse ArrayStorage's m_length for testing array consistency | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Benjamin Poulain <benjamin> | ||||
Component: | JavaScriptCore | Assignee: | Benjamin Poulain <benjamin> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | barraclough, ggaren | ||||
Priority: | P2 | Keywords: | InRadar | ||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Attachments: |
|
Description
Benjamin Poulain
2012-04-06 15:33:10 PDT
Related to <rdar://problem/11197244> Created attachment 136077 [details]
Patch
Comment on attachment 136077 [details]
Patch
r=me
Committed r113530: <http://trac.webkit.org/changeset/113530> |