RESOLVED FIXED165672
GC might be forced to look at a nuked object due to ordering of AllocatePropertyStorage, MaterializeNewObject, and PutStructure 
https://bugs.webkit.org/show_bug.cgi?id=165672
Summary GC might be forced to look at a nuked object due to ordering of AllocatePrope...
Filip Pizlo
Reported 2016-12-09 12:25:07 PST
Patch forthcoming.
Attachments
the patch (29.90 KB, patch)
2016-12-09 13:56 PST, Filip Pizlo 		no flags
DetailsFormatted DiffDiff
the patch (30.02 KB, patch)
2016-12-09 13:57 PST, Filip Pizlo 		ggaren: review+
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2016-12-09 13:56:26 PST
Created attachment 296691 [details] the patch
Filip Pizlo
Comment 2 2016-12-09 13:57:08 PST
Created attachment 296692 [details] the patch
Geoffrey Garen
Comment 3 2016-12-09 13:59:17 PST
Comment on attachment 296692 [details] the patch r=me
Filip Pizlo
Comment 4 2016-12-09 17:23:11 PST
Landed in https://trac.webkit.org/changeset/209638
Filip Pizlo
Comment 5 2016-12-11 17:17:19 PST
*** Bug 165674 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.