<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Remove AllocationProfileWatchpoint node"
href="https://bugs.webkit.org/show_bug.cgi?id=143999#c2">Comment # 2</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Remove AllocationProfileWatchpoint node"
href="https://bugs.webkit.org/show_bug.cgi?id=143999">bug 143999</a>
from <span class="vcard"><a class="email" href="mailto:basile_clement@apple.com" title="Basile Clement <basile_clement@apple.com>"> <span class="fn">Basile Clement</span></a>
</span></b>
<pre>Comment on <span class=""><a href="attachment.cgi?id=251246&action=diff" name="attach_251246" title="Tentative patch, non thread-safe">attachment 251246</a> <a href="attachment.cgi?id=251246&action=edit" title="Tentative patch, non thread-safe">[details]</a></span>
Tentative patch, non thread-safe
View in context: <a href="https://bugs.webkit.org/attachment.cgi?id=251246&action=review">https://bugs.webkit.org/attachment.cgi?id=251246&action=review</a>
<span class="quote">> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:2643
> if (Structure* structure = function->allocationStructure()) {</span >
We probably need to freeze the rare data here, in case it is removed by the JS thread and then the GC runs at that point.
Not sure how to do this, I first need to investigate more deeply how freeze() & the GC works.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>