[webkit-reviews] review denied: [Bug 119395] JavaScript crash. : [Attachment 207921] Patch

[bugzilla-daemon at webkit.org]

Geoffrey Garen <ggaren at apple.com> has denied peavo at outlook.com's request for
review:
Bug 119395: JavaScript crash.
https://bugs.webkit.org/show_bug.cgi?id=119395

Attachment 207921: Patch
https://bugs.webkit.org/attachment.cgi?id=207921&action=review

------- Additional Comments from Geoffrey Garen <ggaren at apple.com>
Can you provide a test case for this?

I don't think checking isEmpty() here is right. Generally, JSValue() is not a
valid value to use in the JIT or to pass to a runtime function. It's like a
null pointer.