Bug 178110 - JSCell::didBecomePrototype is racy
Summary: JSCell::didBecomePrototype is racy
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Filip Pizlo
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2017-10-09 19:12 PDT by Filip Pizlo
Modified: 2017-10-09 19:49 PDT (History)
6 users (show)

See Also:


Attachments
the patch (1.40 KB, patch)
2017-10-09 19:13 PDT, Filip Pizlo
sbarati: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2017-10-09 19:12:37 PDT
Patch forthcoming.
Comment 1 Filip Pizlo 2017-10-09 19:13:43 PDT
Created attachment 323270 [details]
the patch
Comment 2 Filip Pizlo 2017-10-09 19:48:56 PDT
Landed in https://trac.webkit.org/changeset/223116/webkit
Comment 3 Radar WebKit Bug Importer 2017-10-09 19:49:51 PDT
<rdar://problem/34901632>