[Webkit-unassigned] [Bug 69102] Structure transitions involving many (> 64) properties sometimes cause structure corruption

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 29 13:38:26 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=69102





--- Comment #4 from Filip Pizlo <fpizlo at apple.com>  2011-09-29 13:38:26 PST ---
(In reply to comment #2)
> (From update of attachment 109196 [details])
> Unfortunate that we can’t figure out how to test. Given we did signed char before, I’m surprised you went right to int rather than considering short. Not sure how we’re doing on total size of Structure.

I went to int because I didn't want to see this bug ever again.  I considered unsigned, but that would make the change bigger (the code uses -1 as a marker).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list