[Webkit-unassigned] [Bug 132057] CSS JIT: Backtracking with current matching element support for Child fragment.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Apr 25 02:32:17 PDT 2014
https://bugs.webkit.org/show_bug.cgi?id=132057
--- Comment #19 from Yusuke Suzuki <utatane.tea at gmail.com> 2014-04-25 02:32:37 PST ---
(From update of attachment 230071)
View in context: https://bugs.webkit.org/attachment.cgi?id=230071&action=review
>> Source/WebCore/cssjit/SelectorCompiler.cpp:838
>> + saveDescendantBacktrackingStartFragmentIndex = i;
>
> Here we could have an ASSERT(saveDescendantBacktrackingStartFragmentIndex == std::numeric_limits<unsigned>::max()).
Right! Inserted ASSERT here.
>> Source/WebCore/cssjit/SelectorCompiler.cpp:1008
>> tagMatchingLocalFailureCases.linkTo(loopStart, &m_assembler);
>
> Let's rename tagMatchingLocalFailureCases to matchingFailureCases in this case.
Renamed to matchingFailureCases.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list