[Webkit-unassigned] [Bug 30137] [V8] Protect JS listener object from GC while clearing a property on it.

Wed Oct 7 09:33:10 PDT 2009

https://bugs.webkit.org/show_bug.cgi?id=30137

Adam Barth <abarth at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #40745|review?                     |review+, commit-queue+
               Flag|                            |

--- Comment #2 from Adam Barth <abarth at webkit.org>  2009-10-07 09:33:10 PDT ---
(From update of attachment 40745)
I don't see how this is possible to test.  We'd need to force GC during the
clearWrapper call, but I don't think that re-enters JavaScript....  Thoughts?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.