Bug 127943 - REGRESSION (r160628): LLint does not appear to handle impure get own property properly
Summary: REGRESSION (r160628): LLint does not appear to handle impure get own property...
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Ryosuke Niwa
Keywords: InRadar
Depends on:
Reported: 2014-01-30 13:10 PST by Oliver Hunt
Modified: 2014-02-07 11:55 PST (History)
4 users (show)

See Also:

Patch (1.82 KB, patch)
2014-02-07 11:53 PST, Oliver Hunt
fpizlo: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2014-01-30 13:10:17 PST
If i have i disable the hits, then these tests fail:

[121/318] js/dom/dfg-prototype-chain-caching-with-impure-get-own-property-slot-traps-5.html failed unexpectedly (text diff)
[241/318] js/dom/prototype-chain-caching-with-impure-get-own-property-slot-traps-5.html failed unexpectedly (text diff)

Which appears to be due to incorrect document lookup caching
Comment 1 Radar WebKit Bug Importer 2014-01-30 13:30:25 PST
Comment 2 Oliver Hunt 2014-02-07 11:53:17 PST
Created attachment 223478 [details]
Comment 3 Ryosuke Niwa 2014-02-07 11:54:47 PST
Comment on attachment 223478 [details]

Thanks for the fix!
Comment 4 Oliver Hunt 2014-02-07 11:55:24 PST
Committed r163639: <http://trac.webkit.org/changeset/163639>