RESOLVED FIXED 157760
TypeSet/StructureShape have a flawed sense of JS prototype chains 
https://bugs.webkit.org/show_bug.cgi?id=157760
Summary TypeSet/StructureShape have a flawed sense of JS prototype chains
Saam Barati
Reported 2016-05-16 15:29:28 PDT
There was an assumption that we would bottom out in "Object". This is not true for many reasons.
Attachments
patch (2.82 KB, patch)
2016-05-16 15:34 PDT, Saam Barati 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Saam Barati
Comment 1 2016-05-16 15:34:31 PDT
Created attachment 279054 [details] patch
Blaze Burg
Comment 2 2016-05-16 15:36:39 PDT
rdar://problem/26288389
Joseph Pecoraro
Comment 3 2016-05-16 15:42:08 PDT
Comment on attachment 279054 [details] patch r=me
WebKit Commit Bot
Comment 4 2016-05-16 16:26:31 PDT
Comment on attachment 279054 [details] patch Clearing flags on attachment: 279054 Committed r200980: <http://trac.webkit.org/changeset/200980>
WebKit Commit Bot
Comment 5 2016-05-16 16:26:36 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.