[webkit-reviews] review requested: [Bug 117280] JSC: Crash beneath cti_op_div @ http://gmailblog.blogspot.com : [Attachment 203903] Patch

[bugzilla-daemon at webkit.org]

Michael Saboff <msaboff at apple.com> has asked  for review:
Bug 117280: JSC: Crash beneath cti_op_div @ http://gmailblog.blogspot.com
https://bugs.webkit.org/show_bug.cgi?id=117280

Attachment 203903: Patch
https://bugs.webkit.org/attachment.cgi?id=203903&action=review

------- Additional Comments from Michael Saboff <msaboff at apple.com>
This fixes the problem by merging the various attributes of a
VariableAccessData with the root node of the unified set of VariableAccessData
nodes.	Before we were merging with a leaf node and therefore the merge didn't
propgate to the code generation phase.

This is performance neutral on SunSpider and V8.