[Webkit-unassigned] [Bug 21234] JavaScript crash for all pages in op_get_by_id_chain opcode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Mar 4 02:04:38 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=21234


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |FIXED
                 CC|                            |oliver at apple.com




--- Comment #2 from Oliver Hunt <oliver at apple.com>  2010-03-04 02:04:38 PST ---
This has been fixed in tot, a goto is now used:
#define NEXT_INSTRUCTION() SAMPLE(callFrame->codeBlock(), vPC); goto
interpreterLoopStart

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list