Bug 96962

Summary: We don't have a bad enough time if an object's prototype chain crosses global objects
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Severity: Normal CC: barraclough
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Bug Depends on: 96596    
Bug Blocks:    
Description Flags
the patch ggaren: review+

Description Filip Pizlo 2012-09-17 15:27:50 PDT
Patch forthcoming.
Comment 1 Filip Pizlo 2012-09-17 15:29:42 PDT
Created attachment 164461 [details]
the patch
Comment 2 Geoffrey Garen 2012-09-17 15:34:37 PDT
Comment on attachment 164461 [details]
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=164461&action=review


> Source/JavaScriptCore/runtime/JSGlobalObject.cpp:385
>      if (!hasBrokenIndexing(object))

Push this filter higher, since it will filter often.
Comment 3 Filip Pizlo 2012-09-17 15:48:49 PDT
Landed in http://trac.webkit.org/changeset/128816