[Webkit-unassigned] [Bug 129271] REGRESSION(r164493): DYEBench crash in JSCObject::put

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=129271





--- Comment #4 from Mark Hahnenberg <mhahnenberg at apple.com>  2014-02-24 14:32:32 PST ---
(In reply to comment #3)
> This still reproduces with JSC_alwaysDoFullCollection=1 which implies it's not caused by the premature deallocation of a live object.

I should say, it's not a premature deallocation of a live object due to generational collection. We could still be blowing away a live object during a full collection.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.