Currently StringCache::m_stringCache is implemented as HashMap<StringImpl*, v8::String*>. Given that v8::String* can change when a GC is triggered, this is dangerous. We should use HashMap<StringImpl*, v8::Persistent<v8::String>> instead.
Created attachment 186971 [details]
Comment on attachment 186971 [details]
Clearing flags on attachment: 186971
Committed r142154: <http://trac.webkit.org/changeset/142154>
All reviewed patches have been landed. Closing bug.