Bug 94026

Summary:

fast/js/dfg-compare-final-object-to-final-object-or-other-when-both-proven-final-object.html crashes on 32-bit

Product:

WebKit

Reporter:

Mark Hahnenberg <mhahnenberg>

Component:

JavaScriptCore

Assignee:

Filip Pizlo <fpizlo>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, fpizlo, ggaren, mhahnenberg, msaboff, oliver

Priority:

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
the patch	mhahnenberg: review+

Description Mark Hahnenberg 2012-08-14 15:41:37 PDT

Assertion failure in debug mode on 32-bit Mac as of r125571.

Comment 1 Filip Pizlo 2012-08-20 15:27:59 PDT

Created attachment 159537 [details]
the patch

Comment 2 Mark Hahnenberg 2012-08-20 15:31:46 PDT

Comment on attachment 159537 [details]
the patch

r=me

Comment 3 Filip Pizlo 2012-08-20 15:33:39 PDT

Fixed in http://trac.webkit.org/changeset/126081