Bug 69075 - bug fixes for CreateThis, NewObject and GetByOffset in JSVALUE32_64 DFG JIT
Summary: bug fixes for CreateThis, NewObject and GetByOffset in JSVALUE32_64 DFG JIT
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-09-29 02:02 PDT by Yuqiang Xian
Modified: 2011-09-29 12:06 PDT (History)
2 users (show)

See Also:


Attachments
the patch (2.45 KB, patch)
2011-09-29 02:05 PDT, Yuqiang Xian
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Yuqiang Xian 2011-09-29 02:02:03 PDT
Arguments are not passed correctly for CreateThis and NewObject. The child node is incorrectly "used" by twice for GetbyOffset.
Comment 1 Yuqiang Xian 2011-09-29 02:05:23 PDT
Created attachment 109136 [details]
the patch
Comment 2 WebKit Review Bot 2011-09-29 12:06:47 PDT
Comment on attachment 109136 [details]
the patch

Clearing flags on attachment: 109136

Committed r96344: <http://trac.webkit.org/changeset/96344>
Comment 3 WebKit Review Bot 2011-09-29 12:06:51 PDT
All reviewed patches have been landed.  Closing bug.