Bug 128713 - JSManagedValue::dealloc modifies NSMapTable while iterating it
Summary: JSManagedValue::dealloc modifies NSMapTable while iterating it
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Mark Hahnenberg
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-02-12 18:09 PST by Mark Hahnenberg
Modified: 2014-02-13 18:31 PST (History)
1 user (show)

See Also:

Attachments
Patch (4.48 KB, patch)
2014-02-13 16:26 PST, Mark Hahnenberg 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Hahnenberg 2014-02-12 18:09:47 PST 
...
Comment 1 Mark Hahnenberg 2014-02-13 16:26:49 PST 
Created attachment 224128 [details]
Patch
Comment 2 Geoffrey Garen 2014-02-13 16:50:34 PST 
Comment on attachment 224128 [details]
Patch

r=me
Comment 3 WebKit Commit Bot 2014-02-13 18:31:39 PST 
Comment on attachment 224128 [details]
Patch

Clearing flags on attachment: 224128

Committed r164088: <http://trac.webkit.org/changeset/164088>
Comment 4 WebKit Commit Bot 2014-02-13 18:31:40 PST 
All reviewed patches have been landed.  Closing bug.