Skip to content
  • barraclough@apple.com's avatar
    JavaScriptCore: · 94484965
    barraclough@apple.com authored
    2009-07-21  Zoltan Herczeg  <zherczeg@inf.u-szeged.hu>
    
            Reviewed by Gavin Barraclough.
    
            Cache not only the structure of the method, but the
            structure of its prototype as well.
            https://bugs.webkit.org/show_bug.cgi?id=27077
    
            * bytecode/CodeBlock.cpp:
            (JSC::CodeBlock::~CodeBlock):
            * bytecode/CodeBlock.h:
            (JSC::MethodCallLinkInfo::MethodCallLinkInfo):
            * jit/JITPropertyAccess.cpp:
            (JSC::JIT::patchMethodCallProto):
    
    LayoutTests:
    
    2009-07-21  Zoltan Herczeg  <zherczeg@inf.u-szeged.hu>
    
            Reviewed by Gavin Barraclough, RS olliej fix to make the test pass.
    
            Check whether a crash happens after the string
            prototype is overwritten twice. The JIT'ed code
            may crash if one of its already cached method
            called again. Note: This test is not necessary
            crash on all systems, because they use different
            memory allocators!
            https://bugs.webkit.org/show_bug.cgi?id=27077
    
            * fast/js/method-check-expected.txt: Added.
            * fast/js/method-check.html: Added.
            * fast/js/resources/method-check.js: Added.
            (func2):
            (func.String.prototype.a):
            (func.String.prototype.b):
            (func):
    
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@46210 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    94484965