[Webkit-unassigned] [Bug 156831] [WinCairo] heap corruption is detected when destructing JSGlobalObject
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Apr 20 20:57:44 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=156831
--- Comment #2 from Fujii Hironori <Hironori.Fujii at sony.com> ---
There are two ways to solve this problem:
1) Not inlined JSGlobalObject::createRareDataIfNeeded or part of it
2) Apply WTF_MAKE_FAST_ALLOCATED the classes allocated from inline functions
I don't know why AppleWin port does not have this problem, but WinCairo port does.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160421/d7a65022/attachment.html>
More information about the webkit-unassigned
mailing list