Bug 165672 - GC might be forced to look at a nuked object due to ordering of AllocatePropertyStorage, MaterializeNewObject, and PutStructure
Summary: GC might be forced to look at a nuked object due to ordering of AllocatePrope...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Filip Pizlo
URL:
Keywords:
: 165674 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-12-09 12:25 PST by Filip Pizlo
Modified: 2016-12-11 17:17 PST (History)
6 users (show)

See Also:


Attachments
the patch (29.90 KB, patch)
2016-12-09 13:56 PST, Filip Pizlo
no flags Details | Formatted Diff | Diff
the patch (30.02 KB, patch)
2016-12-09 13:57 PST, Filip Pizlo
ggaren: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2016-12-09 12:25:07 PST
Patch forthcoming.
Comment 1 Filip Pizlo 2016-12-09 13:56:26 PST
Created attachment 296691 [details]
the patch
Comment 2 Filip Pizlo 2016-12-09 13:57:08 PST
Created attachment 296692 [details]
the patch
Comment 3 Geoffrey Garen 2016-12-09 13:59:17 PST
Comment on attachment 296692 [details]
the patch

r=me
Comment 4 Filip Pizlo 2016-12-09 17:23:11 PST
Landed in https://trac.webkit.org/changeset/209638
Comment 5 Filip Pizlo 2016-12-11 17:17:19 PST
*** Bug 165674 has been marked as a duplicate of this bug. ***