RESOLVED FIXED 23468
fast/js/primitive-property-access-edge-cases.html fails on non-JIT.
https://bugs.webkit.org/show_bug.cgi?id=23468
Summary fast/js/primitive-property-access-edge-cases.html fails on non-JIT.
Gavin Barraclough
Reported Thursday, January 22, 2009 2:57:18 AM UTC
Hits an ASSERT trying to cast a non-object primitive JSCell to a JSObject.
Attachments
The patch (1.67 KB, patch)
2009-01-21 19:00 PST, Gavin Barraclough
ggaren: review+
Gavin Barraclough
Comment 1 Thursday, January 22, 2009 3:00:50 AM UTC
Created attachment 26919 [details] The patch
Geoffrey Garen
Comment 2 Thursday, January 22, 2009 3:10:57 AM UTC
Comment on attachment 26919 [details] The patch r=me
Gavin Barraclough
Comment 3 Thursday, January 22, 2009 3:38:13 AM UTC
Sending JavaScriptCore/ChangeLog Sending JavaScriptCore/interpreter/Interpreter.cpp Transmitting file data .. Committed revision 40108.
Note You need to log in before you can comment on or make changes to this bug.