RESOLVED DUPLICATE of bug 164454 164421
JSCell::setStructure() does its barrier in the wrong order 
https://bugs.webkit.org/show_bug.cgi?id=164421
Summary JSCell::setStructure() does its barrier in the wrong order
Filip Pizlo
Reported 2016-11-04 12:32:21 PDT
Patch forthcoming.
Attachments
Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2016-11-09 20:27:59 PST
*** This bug has been marked as a duplicate of bug 164454 ***
Note You need to log in before you can comment on or make changes to this bug.