Bug 96962

Summary:

We don't have a bad enough time if an object's prototype chain crosses global objects

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Filip Pizlo <fpizlo>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Bug Depends on:

96596

Bug Blocks:

Attachments:

Description	Flags
the patch	ggaren: review+

Description Filip Pizlo 2012-09-17 15:27:50 PDT

Patch forthcoming.

Comment 1 Filip Pizlo 2012-09-17 15:29:42 PDT

Created attachment 164461 [details]
the patch

Comment 2 Geoffrey Garen 2012-09-17 15:34:37 PDT

Comment on attachment 164461 [details]
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=164461&action=review

r=me

> Source/JavaScriptCore/runtime/JSGlobalObject.cpp:385
>      if (!hasBrokenIndexing(object))

Push this filter higher, since it will filter often.

Comment 3 Filip Pizlo 2012-09-17 15:48:49 PDT

Landed in http://trac.webkit.org/changeset/128816