[Webkit-unassigned] [Bug 199684] Assigning object property twice in a loop breaks JSCore on powerpc64 and s390x

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 12 07:11:03 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=199684

--- Comment #1 from Alberto Garcia <berto at igalia.com> ---
Yeah, I can reproduce this simply by saving the following piece of code to a test.js file and running it with /usr/bin/jsc.

for (var i = 0; i < 2; i++) {
    var foo = {};
    foo.bar = null;
}

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190712/aaba41b9/attachment-0001.html>


More information about the webkit-unassigned mailing list