[Webkit-unassigned] [Bug 35398] Race condition in JSPropertyNameIterator and Structure destruction

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=35398


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #49516|                            |review?
               Flag|                            |




--- Comment #1 from Oliver Hunt <oliver at apple.com>  2010-02-25 12:21:53 PST ---
Created an attachment (id=49516)
 --> (https://bugs.webkit.org/attachment.cgi?id=49516)
Patch

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.