Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 6f5b850ee2062debdacd43ff5df16aef69f80de8
https://github.com/WebKit/WebKit/commit/6f5b850ee2062debdacd43ff5df16aef69f80de8
Author: Yijia Huang <yijia_hu...@apple.com>
Date: 2024-07-09 (Tue, 09 Jul 2024)
Changed paths:
M Source/JavaScriptCore/runtime/OrderedHashTableHelper.h
Log Message:
-----------
REGRESSION(280734@main): ASSERTION FAILED: isInt32() in
JSC::JSValue::asInt32() for js/basic-map.html
https://bugs.webkit.org/show_bug.cgi?id=276333
rdar://131336271
Reviewed by Keith Miller and Mark Lam.
OrderedHashTableHelper::transitAndNext may return the latest storage
in the storage transition chain due to table rehashing. So,
nextAndUpdateIterationEntry should update the iteration entry in the
non-obsolete storage.
* Source/JavaScriptCore/runtime/OrderedHashTableHelper.h:
(JSC::OrderedHashTableHelper::nextAndUpdateIterationEntry):
Canonical link: https://commits.webkit.org/280776@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
