[Webkit-unassigned] [Bug 20911] REGRESSION: Reproducible assertion failure below derefStructureIDs 64-bit JavaScriptCore

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20911





------- Comment #2 from mrowe at apple.com  2008-09-18 01:29 PDT -------
Created an attachment (id=23524)
 --> (https://bugs.webkit.org/attachment.cgi?id=23524&action=view)
Make "operand" member pointer-sized

The attached patch makes the "operand" member of the union pointer-sized, which
ensures that the high bits of the union will also be set when initializing an
Instruction with 0.  This fixes the assertion failures and crashes in the
layout tests.

I don't have time to perf test this change tonight.  I wouldn't expect it to
have any effect in 32-bit, but it may have some effect in 64-bit.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.