Inherits ScopeChain class from FastAllocBase because it has been instantiated by 'new' in JavaScriptCore/runtime/JSFunction.h:109.
Created attachment 33774 [details] proposed patch
Comment on attachment 33774 [details] proposed patch Clearing review flag on attachment: 33774 Committing to http://svn.webkit.org/repository/webkit/trunk ... M JavaScriptCore/ChangeLog M JavaScriptCore/runtime/ScopeChain.h Committed r46668 M JavaScriptCore/runtime/ScopeChain.h M JavaScriptCore/ChangeLog r46668 = 90053501e66706eafcc6a1899f728634c387850f (trunk) No changes between current HEAD and refs/remotes/trunk Resetting to the latest refs/remotes/trunk http://trac.webkit.org/changeset/46668
All reviewed patches have been landed. Closing bug.
Comment on attachment 33774 [details] proposed patch This patch needs to be rolled out - it was using placement new, ScopeChain is not a heap allocated type.
Reopening as it this patch needs to be rolled out - the bug is invalid.
You are right! Thanks for your attention.
Rolled out in r46679.