Bug 23468 - fast/js/primitive-property-access-edge-cases.html fails on non-JIT.
Summary: fast/js/primitive-property-access-edge-cases.html fails on non-JIT.
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac OS X 10.5
: P2 Normal
Assignee: Gavin Barraclough
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-01-21 18:57 PST by Gavin Barraclough
Modified: 2009-01-21 19:38 PST (History)
0 users

See Also:


Attachments
The patch (1.67 KB, patch)
2009-01-21 19:00 PST, Gavin Barraclough
ggaren: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Gavin Barraclough 2009-01-21 18:57:18 PST
Hits an ASSERT trying to cast a non-object primitive JSCell to a JSObject.
Comment 1 Gavin Barraclough 2009-01-21 19:00:50 PST
Created attachment 26919 [details]
The patch
Comment 2 Geoffrey Garen 2009-01-21 19:10:57 PST
Comment on attachment 26919 [details]
The patch

r=me
Comment 3 Gavin Barraclough 2009-01-21 19:38:13 PST
Sending        JavaScriptCore/ChangeLog
Sending        JavaScriptCore/interpreter/Interpreter.cpp
Transmitting file data ..
Committed revision 40108.