[webkit-reviews] review granted: [Bug 40858] Reproducible crash in com.apple.JavaScriptCore 0x005d7164 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 1764 : [Attachment 59201] Patch

[bugzilla-daemon at webkit.org]

Geoffrey Garen <ggaren at apple.com> has granted Oliver Hunt <oliver at apple.com>'s
request for review:
Bug 40858: Reproducible crash in com.apple.JavaScriptCore  0x005d7164
JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const
+ 1764
https://bugs.webkit.org/show_bug.cgi?id=40858

Attachment 59201: Patch
https://bugs.webkit.org/attachment.cgi?id=59201&action=review

------- Additional Comments from Geoffrey Garen <ggaren at apple.com>
+	     CHECK_FOR_EXCEPTION();
+	     return 0;

You want VM_THROW_EXCEPTION() instead.

r=me