[Webkit-unassigned] [Bug 70094] REGRESSION (r97030): Cannot log in to progressive.com

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70094





--- Comment #4 from Filip Pizlo <fpizlo at apple.com>  2011-10-26 13:22:36 PST ---
Looks like this was caused by DFG intrinsic support not keeping the callee alive in the case of the function speculation being done with CheckFunction instead of CheckMethod.  As a result, OSR thought that if the intrinsic body had a speculation failure, then the callee was no longer needed and could be set to Undefined.  The old JIT would then fail to make the (non-intrinsic) call because the callee was Undefined.

Patch on the way.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.