Title: [174749] trunk/Source/_javascript_Core
- Revision
- 174749
- Author
- msab...@apple.com
- Date
- 2014-10-15 17:14:28 -0700 (Wed, 15 Oct 2014)
Log Message
REGRESSION(r174025): remote inspector crashes frequently when executing inspector frontend's _javascript_
https://bugs.webkit.org/show_bug.cgi?id=137758
Rubber stamped by Filip Pizlo.
Reverted r174025 for just PutByOffset Nodes.
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (174748 => 174749)
--- trunk/Source/_javascript_Core/ChangeLog 2014-10-16 00:13:17 UTC (rev 174748)
+++ trunk/Source/_javascript_Core/ChangeLog 2014-10-16 00:14:28 UTC (rev 174749)
@@ -1,3 +1,15 @@
+2014-10-15 Michael Saboff <msab...@apple.com>
+
+ REGRESSION(r174025): remote inspector crashes frequently when executing inspector frontend's _javascript_
+ https://bugs.webkit.org/show_bug.cgi?id=137758
+
+ Rubber stamped by Filip Pizlo.
+
+ Reverted r174025 for just PutByOffset Nodes.
+
+ * dfg/DFGFixupPhase.cpp:
+ (JSC::DFG::FixupPhase::fixupNode):
+
2014-10-14 Gyuyoung Kim <gyuyoung....@samsung.com>
Clean up unnecessary PassOwnPtr.h inclusion
Modified: trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp (174748 => 174749)
--- trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2014-10-16 00:13:17 UTC (rev 174748)
+++ trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2014-10-16 00:14:28 UTC (rev 174749)
@@ -943,7 +943,7 @@
if (!node->child1()->hasStorageResult())
fixEdge<KnownCellUse>(node->child1());
fixEdge<KnownCellUse>(node->child2());
- insertStoreBarrier(m_indexInBlock, node->child2(), node->child3());
+ insertStoreBarrier(m_indexInBlock, node->child2());
break;
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
