[Webkit-unassigned] [Bug 64017] DFG speculative JIT may crash when speculating int on a non-int JSConstant

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 6 13:00:52 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=64017


Gavin Barraclough <barraclough at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #99863|review?, commit-queue?      |review+, commit-queue+
               Flag|                            |




--- Comment #2 from Gavin Barraclough <barraclough at apple.com>  2011-07-06 13:00:52 PST ---
(From update of attachment 99863)
At some point we should remove that resolved FIXME you found, too.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list