[Webkit-unassigned] [Bug 91599] DFG 32-bit PutById transition stub storage reallocation case copies the first pointer of each JSValue instead of the whole JSValue

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=91599


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|DFG PutById transition stub |DFG 32-bit PutById
                   |storage reallocation case   |transition stub storage
                   |copies the first pointer of |reallocation case copies
                   |each JSValue instead of the |the first pointer of each
                   |whole JSValue               |JSValue instead of the
                   |                            |whole JSValue




-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.