[Webkit-unassigned] [Bug 72089] JSString forgets to clear m_fibers when resolving ropes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Nov 10 22:08:03 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=72089


Geoffrey Garen <ggaren at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #114626|review?                     |review+
               Flag|                            |




--- Comment #4 from Geoffrey Garen <ggaren at apple.com>  2011-11-10 22:08:03 PST ---
(From update of attachment 114626)
View in context: https://bugs.webkit.org/attachment.cgi?id=114626&action=review

> Source/JavaScriptCore/runtime/JSString.cpp:109
> +        // Clearing here works only because there are no GC points in this method.

Might be good to merge this with the comment above, which ASSERTs that using a Vector is OK -- really, using a Vector is only OK because GC just won't happen.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list