[Webkit-unassigned] [Bug 64017] DFG speculative JIT may crash when speculating int on a non-int JSConstant

Wed Jul 6 12:58:17 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=64017

Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #99863|                            |review?, commit-queue?
               Flag|                            |

--- Comment #1 from Filip Pizlo <fpizlo at apple.com>  2011-07-06 12:58:17 PST ---
Created an attachment (id=99863)
 --> (https://bugs.webkit.org/attachment.cgi?id=99863&action=review)
the patch

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.