Bug 128037 - REGRESSION (r163027?): CrashTracer: [USER] com.apple.WebKit.WebContent.Development at com.apple.JavaScriptCore: JSC::ArrayProfile::computeUpdatedPrediction + 4
Summary: REGRESSION (r163027?): CrashTracer: [USER] com.apple.WebKit.WebContent.Develo...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2014-01-31 21:55 PST by Michael Saboff
Modified: 2014-02-01 07:26 PST (History)
1 user (show)

See Also:


Attachments
Patch (2.98 KB, patch)
2014-01-31 23:00 PST, Michael Saboff
mark.lam: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Saboff 2014-01-31 21:55:48 PST
It appears that we need to allocate an ArrayProfile for op_call_varargs.

Patch in the works.
Comment 1 Michael Saboff 2014-01-31 21:56:20 PST
<rdar://problem/15940395>
Comment 2 Michael Saboff 2014-01-31 23:00:46 PST
Created attachment 222874 [details]
Patch
Comment 3 Mark Lam 2014-02-01 00:14:29 PST
Comment on attachment 222874 [details]
Patch

r=me
Comment 4 Geoffrey Garen 2014-02-01 00:29:14 PST
Nice!
Comment 5 Michael Saboff 2014-02-01 07:26:06 PST
Committed r163241: <http://trac.webkit.org/changeset/163241>