Bug 183942 - LLInt TypeArray pointer poisoning should not pick its poison dynamically.
Summary: LLInt TypeArray pointer poisoning should not pick its poison dynamically.
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Mark Lam
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-03-23 10:24 PDT by Mark Lam
Modified: 2018-03-23 11:56 PDT (History)
7 users (show)

See Also:


Attachments
proposed patch. (8.20 KB, patch)
2018-03-23 10:40 PDT, Mark Lam
jfbastien: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Lam 2018-03-23 10:24:32 PDT
Patch coming.
Comment 1 Radar WebKit Bug Importer 2018-03-23 10:25:25 PDT
<rdar://problem/38798018>
Comment 2 Mark Lam 2018-03-23 10:40:31 PDT
Created attachment 336387 [details]
proposed patch.
Comment 3 JF Bastien 2018-03-23 10:46:13 PDT
Comment on attachment 336387 [details]
proposed patch.

r=me
Comment 4 Mark Lam 2018-03-23 11:56:29 PDT
Thanks for the review.  Landed in r229912: <http://trac.webkit.org/r229912>.