[Webkit-unassigned] [Bug 26508] Reimplement the prototype direct get by id optimisation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26508





------- Comment #1 from ggaren at apple.com  2009-06-18 09:09 PDT -------
Specifically, m_propertyStorage would change even though m_structure had not
changed.

Here are the steps to reproduce a crash:

1. Load maps.google.com
2. Select "Get Directions"
3. Select "Public Transit"
4. From "55 Roberts Rd Unit E, Los Gatos, CA" to "Moscone Center West"
5. Select first "Moscone" destination substitute option.
6. When page loads, click "Get Directions" again
--> Crash


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.