[Webkit-unassigned] [Bug 156831] [WinCairo] heap corruption is detected when destructing JSGlobalObject

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 20 20:57:44 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=156831

--- Comment #2 from Fujii Hironori <Hironori.Fujii at sony.com> ---
There are two ways to solve this problem:

1) Not inlined JSGlobalObject::createRareDataIfNeeded or part of it
2) Apply WTF_MAKE_FAST_ALLOCATED the classes allocated from inline functions

I don't know why AppleWin port does not have this problem, but WinCairo port does.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160421/d7a65022/attachment.html>


More information about the webkit-unassigned mailing list