Title: [173787] trunk/Source/_javascript_Core
- Revision
- 173787
- Author
- [email protected]
- Date
- 2014-09-19 20:01:44 -0700 (Fri, 19 Sep 2014)
Log Message
Leak of mallocs under StructureSet::OutOfLineList::create
https://bugs.webkit.org/show_bug.cgi?id=136970
Reviewed by Filip Pizlo.
addOutOfLine should free the old list when expanding the capacity.
* bytecode/StructureSet.cpp:
(JSC::StructureSet::addOutOfLine):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (173786 => 173787)
--- trunk/Source/_javascript_Core/ChangeLog 2014-09-20 02:44:25 UTC (rev 173786)
+++ trunk/Source/_javascript_Core/ChangeLog 2014-09-20 03:01:44 UTC (rev 173787)
@@ -1,3 +1,15 @@
+2014-09-19 Ryosuke Niwa <[email protected]>
+
+ Leak of mallocs under StructureSet::OutOfLineList::create
+ https://bugs.webkit.org/show_bug.cgi?id=136970
+
+ Reviewed by Filip Pizlo.
+
+ addOutOfLine should free the old list when expanding the capacity.
+
+ * bytecode/StructureSet.cpp:
+ (JSC::StructureSet::addOutOfLine):
+
2014-09-19 Daniel Bates <[email protected]>
Always assume internal SDK when building configuration Production
Modified: trunk/Source/_javascript_Core/bytecode/StructureSet.cpp (173786 => 173787)
--- trunk/Source/_javascript_Core/bytecode/StructureSet.cpp 2014-09-20 02:44:25 UTC (rev 173786)
+++ trunk/Source/_javascript_Core/bytecode/StructureSet.cpp 2014-09-20 03:01:44 UTC (rev 173787)
@@ -357,6 +357,7 @@
for (unsigned i = list->m_length; i--;)
newList->list()[i] = list->list()[i];
newList->list()[list->m_length] = structure;
+ OutOfLineList::destroy(list);
set(newList);
return true;
}
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
