Bug 127943 - REGRESSION (r160628): LLint does not appear to handle impure get own property properly
Summary: REGRESSION (r160628): LLint does not appear to handle impure get own property...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Ryosuke Niwa
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2014-01-30 13:10 PST by Oliver Hunt
Modified: 2014-02-07 11:55 PST (History)
4 users (show)

See Also:

Attachments
Patch (1.82 KB, patch)
2014-02-07 11:53 PST, Oliver Hunt 		fpizlo: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2014-01-30 13:10:17 PST 
If i have i disable the hits, then these tests fail:

[121/318] js/dom/dfg-prototype-chain-caching-with-impure-get-own-property-slot-traps-5.html failed unexpectedly (text diff)
[241/318] js/dom/prototype-chain-caching-with-impure-get-own-property-slot-traps-5.html failed unexpectedly (text diff)


Which appears to be due to incorrect document lookup caching
Comment 1 Radar WebKit Bug Importer 2014-01-30 13:30:25 PST 
<rdar://problem/15950313>
Comment 2 Oliver Hunt 2014-02-07 11:53:17 PST 
Created attachment 223478 [details]
Patch
Comment 3 Ryosuke Niwa 2014-02-07 11:54:47 PST 
Comment on attachment 223478 [details]
Patch

Thanks for the fix!
Comment 4 Oliver Hunt 2014-02-07 11:55:24 PST 
Committed r163639: <http://trac.webkit.org/changeset/163639>