Status: New
Owner: ----
CC: [email protected], [email protected], [email protected],
[email protected]
Labels: Type-Bug Priority-Medium
New issue 3774 by [email protected]: Handles pointing to left trimmable
arrays may cause crashes
https://code.google.com/p/v8/issues/detail?id=3774
Scenario: A handle points to the backing store of an array, which gets left
trimmed. Left trimming will move the object header and stores a one word
filler at the beginning of the original object. Hence after left trimming
the handle will point to the filler.
Problem: The garbage collector will mark this one word filler as live. 1.
We do not want live fillers in the transitive closure. 2. We do not support
one word objects while marking.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
