[Webkit-unassigned] [Bug 70777] Object-or-other branch speculation may corrupt the state for OSR if the child of the branch is an integer
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Oct 24 16:47:15 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=70777
Filip Pizlo <fpizlo at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #112274| |review?
Flag| |
--- Comment #1 from Filip Pizlo <fpizlo at apple.com> 2011-10-24 16:47:15 PST ---
Created an attachment (id=112274)
--> (https://bugs.webkit.org/attachment.cgi?id=112274&action=review)
the patch
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list