[Webkit-unassigned] [Bug 140137] New: MultiGetByOffset should be marked NodeMustGenerate

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=140137

            Bug ID: 140137
           Summary: MultiGetByOffset should be marked NodeMustGenerate
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: fpizlo at apple.com

Nodes that perform speculations that are necessary to prove that the equivalent bytecode operation is pure must be marked NodeMustGenerate.  MultiGetByOffset checks the structure of its input.  If the incoming object didn't have that structure, then the equivalent bytecode operation (get_by_id) might do something effectful.  But, it's not marked NodeMustGenerate.  We should fix that.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150106/75375814/attachment-0002.html>