[Webkit-unassigned] [Bug 64017] DFG speculative JIT may crash when speculating int on a non-int JSConstant

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 6 12:58:17 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=64017


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #99863|                            |review?, commit-queue?
               Flag|                            |




--- Comment #1 from Filip Pizlo <fpizlo at apple.com>  2011-07-06 12:58:17 PST ---
Created an attachment (id=99863)
 --> (https://bugs.webkit.org/attachment.cgi?id=99863&action=review)
the patch

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list