[Webkit-unassigned] [Bug 20356] Dynamic function/type specialisation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20356


oliver at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |oliver at apple.com




------- Comment #2 from oliver at apple.com  2008-08-11 22:27 PDT -------
This code will trigger a failure in commandline jsc:
g=Math.sqrt; function f(){return g(4);}; Math.sqrt=null; f(); f(); f(); gc();
for (var i = 0; i < 10000; i++) { g=new Function("", "return 3;"); if (f() ==
2) { throw "Failed"; }  }


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.