Bug 123760 - DFG NewArray/NewArrayBuffer shouldn't be constructing with negative indexing
Summary: DFG NewArray/NewArrayBuffer shouldn't be constructing with negative indexing
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Filip Pizlo
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2013-11-04 15:54 PST by Filip Pizlo
Modified: 2013-11-04 16:03 PST (History)
8 users (show)

See Also:


Attachments
the patch (6.74 KB, patch)
2013-11-04 15:58 PST, Filip Pizlo
oliver: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2013-11-04 15:54:49 PST
Since they always use a forward-indexed scratch buffer.

<rdar://problem/15356705>
Comment 1 Filip Pizlo 2013-11-04 15:58:38 PST
Created attachment 215961 [details]
the patch
Comment 2 Filip Pizlo 2013-11-04 16:03:22 PST
Landed in http://trac.webkit.org/changeset/158608