Bug 96962

Summary: We don't have a bad enough time if an object's prototype chain crosses global objects
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Status: RESOLVED FIXED    
Severity: Normal CC: barraclough
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Bug Depends on: 96596    
Bug Blocks:    
Attachments:
Description Flags
the patch ggaren: review+

Filip Pizlo
Reported 2012-09-17 15:27:50 PDT
Patch forthcoming.
Attachments
the patch (9.31 KB, patch)
2012-09-17 15:29 PDT, Filip Pizlo 		ggaren: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2012-09-17 15:29:42 PDT
Created attachment 164461 [details] the patch
Geoffrey Garen
Comment 2 2012-09-17 15:34:37 PDT
Comment on attachment 164461 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=164461&action=review r=me > Source/JavaScriptCore/runtime/JSGlobalObject.cpp:385 > if (!hasBrokenIndexing(object)) Push this filter higher, since it will filter often.
Filip Pizlo
Comment 3 2012-09-17 15:48:49 PDT
Landed in http://trac.webkit.org/changeset/128816
Note You need to log in before you can comment on or make changes to this bug.