[Webkit-unassigned] [Bug 70256] Live range splitting bug

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70256





--- Comment #2 from Oliver Hunt <oliver at apple.com>  2011-10-17 12:52:13 PST ---
It turns out we need to return j to trigger this issue.

function f(a) {
    for (var i = 0; i < 100; i++)
        for (var j = 0; j < a.length; j++)
            a[j] =j;

    return j;
}
f([1,2,3,4,5,6,7,8,9,10])

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.