[webkit-reviews] review requested: [Bug 216638] Add some pointer sanity checks to speculationFromCell(). : [Attachment 409010] proposed patch.

[bugzilla-daemon at webkit.org]

Mark Lam <mark.lam at apple.com> has asked  for review:
Bug 216638: Add some pointer sanity checks to speculationFromCell().
https://bugs.webkit.org/show_bug.cgi?id=216638

Attachment 409010: proposed patch.

https://bugs.webkit.org/attachment.cgi?id=409010&action=review




--- Comment #9 from Mark Lam <mark.lam at apple.com> ---
Created attachment 409010

  --> https://bugs.webkit.org/attachment.cgi?id=409010&action=review

proposed patch.

Add 1 more mitigation, and moved the ASSERT into speculationFromCell() after
discussing with Yusuke offline.