Bug 128037 - REGRESSION (r163027?): CrashTracer: [USER] com.apple.WebKit.WebContent.Development at com.apple.JavaScriptCore: JSC::ArrayProfile::computeUpdatedPrediction + 4
Summary: REGRESSION (r163027?): CrashTracer: [USER] com.apple.WebKit.WebContent.Develo...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2014-01-31 21:55 PST by Michael Saboff
Modified: 2014-02-01 07:26 PST (History)
1 user (show)

See Also:

Attachments
Patch (2.98 KB, patch)
2014-01-31 23:00 PST, Michael Saboff 		mark.lam: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Saboff 2014-01-31 21:55:48 PST 
It appears that we need to allocate an ArrayProfile for op_call_varargs.

Patch in the works.
Comment 1 Michael Saboff 2014-01-31 21:56:20 PST 
<rdar://problem/15940395>
Comment 2 Michael Saboff 2014-01-31 23:00:46 PST 
Created attachment 222874 [details]
Patch
Comment 3 Mark Lam 2014-02-01 00:14:29 PST 
Comment on attachment 222874 [details]
Patch

r=me
Comment 4 Geoffrey Garen 2014-02-01 00:29:14 PST 
Nice!
Comment 5 Michael Saboff 2014-02-01 07:26:06 PST 
Committed r163241: <http://trac.webkit.org/changeset/163241>