[webkit-reviews] review granted: [Bug 201449] Structure::storedPrototype() and storedPrototypeObject() should assert with isCompilationThread(), not !isMainThread(). : [Attachment 377959] proposed patch.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Sep 4 02:22:57 PDT 2019


Yusuke Suzuki <ysuzuki at apple.com> has granted Mark Lam <mark.lam at apple.com>'s
request for review:
Bug 201449: Structure::storedPrototype() and storedPrototypeObject() should
assert with isCompilationThread(), not !isMainThread().
https://bugs.webkit.org/show_bug.cgi?id=201449

Attachment 377959: proposed patch.

https://bugs.webkit.org/attachment.cgi?id=377959&action=review




--- Comment #2 from Yusuke Suzuki <ysuzuki at apple.com> ---
Comment on attachment 377959
  --> https://bugs.webkit.org/attachment.cgi?id=377959
proposed patch.

View in context: https://bugs.webkit.org/attachment.cgi?id=377959&action=review

r=me

> Source/JavaScriptCore/runtime/StructureInlines.h:111
> +    ASSERT(isCompilationThread() || object->structure() == this);

Is it possible that the GC thread accesses to this functions? If so, we should
allow GC thread too (I think we have an check like isCompilationThread). If
not, this check is fine.

> Source/JavaScriptCore/runtime/StructureInlines.h:119
> +    ASSERT(isCompilationThread() || object->structure() == this);

Ditto.


More information about the webkit-reviews mailing list