[Webkit-unassigned] [Bug 101940] StructureStubInfo should NOT be movable

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=101940





--- Comment #3 from Yong Li <yoli at rim.com>  2012-11-12 15:11:27 PST ---
(In reply to comment #2)
> (From update of attachment 173691 [details])
> Wouldn't it be easier to just use a SegmentedVector?

yeah. I just saw m_llintCallLinkInfos is a SegmentedVector. But probably I would have to leave StructureStubInfo copyable otherwise it won't build. I'm trying to go through similar issues, and I noticed that this one is probably unsafe, too:

Vector<GlobalResolveInfo> m_globalResolveInfos;

It seems a GlobalResolveInfo's address can be hard-coded in JIT executable. This might explain an occasional crash I saw where a JIT executable read garbage from a hard-coded address. Will post another patch after going through these Vectors

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.