[Webkit-unassigned] [Bug 12535] kjs garbage collector frees in-use object

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12535





------- Comment #4 from ggaren at apple.com  2007-02-01 15:12 PDT -------
(In reply to comment #2)

Anrong, did you mean to say that the compiler may discard the reference to
'baseObj' or to 'baseVal'? Your reasoning points to 'baseVal', not 'baseObj'.
Would this bug persist if toObject() made use of 'this', prohibiting the
compiler from optimizing out baseVal?

I don't think 'Collector::protect(baseVal);' is a very good solution. It's
inefficient, and it doesn't seem to address the root cause of the problem,
which may affect lots of different parts of the code.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.