Bug 139598 - Splice not removing a sparse element from a JSArray
Summary: Splice not removing a sparse element from a JSArray
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Matthew Mirman
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-12-12 14:53 PST by Matthew Mirman
Modified: 2014-12-12 15:45 PST (History)
4 users (show)

See Also:

Attachments
shiftCountWithArrayStorage should exit to slow path when object has sparse map (1.98 KB, patch)
2014-12-12 15:00 PST, Matthew Mirman 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthew Mirman 2014-12-12 14:53:22 PST 
<rdar://problem/18779367>

Patch Forthcoming.
Comment 1 Matthew Mirman 2014-12-12 15:00:48 PST 
Created attachment 243221 [details]
shiftCountWithArrayStorage should exit to slow path when object has sparse map
Comment 2 WebKit Commit Bot 2014-12-12 15:45:33 PST 
Comment on attachment 243221 [details]
shiftCountWithArrayStorage should exit to slow path when object has sparse map

Clearing flags on attachment: 243221

Committed r177245: <http://trac.webkit.org/changeset/177245>
Comment 3 WebKit Commit Bot 2014-12-12 15:45:36 PST 
All reviewed patches have been landed.  Closing bug.