Summary: Uint8ClampedArray should be treated like an array, not an object Steps to Reproduce: 1. js> Uint8ClampedArray(20000) 2. Expand => hang Notes: - We paginate large arrays.
<rdar://problem/10873037>
Created attachment 308328 [details] [PATCH] Proposed Fix
Created attachment 308329 [details] [PATCH] Proposed Fix Nicer order.
Comment on attachment 308329 [details] [PATCH] Proposed Fix Clearing flags on attachment: 308329 Committed r215855: <http://trac.webkit.org/changeset/215855>
All reviewed patches have been landed. Closing bug.