Commit 94551a41 authored by fpizlo@apple.com's avatar fpizlo@apple.com

JSC ASSERT Opening the Web Inspector

https://bugs.webkit.org/show_bug.cgi?id=69293

Reviewed by Oliver Hunt.

If a polymorphic access structure list has a duplicated structure, then
don't crash.

* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::parseBlock):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@96564 268f45cc-cd09-0410-ab3c-d52691b4dbfc
parent 70558a37
2011-10-03 Filip Pizlo <fpizlo@apple.com>
JSC ASSERT Opening the Web Inspector
https://bugs.webkit.org/show_bug.cgi?id=69293
Reviewed by Oliver Hunt.
If a polymorphic access structure list has a duplicated structure, then
don't crash.
* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::parseBlock):
2011-10-03 Gavin Barraclough <barraclough@apple.com>
On X86, switch bucketCount into a register, timeoutCheck into memory
......@@ -1191,6 +1191,9 @@ bool ByteCodeParser::parseBlock(unsigned limit)
}
Structure* structure = list->list[i].base.get();
if (structureSet.contains(structure))
continue;
size_t myOffset = structure->get(*m_globalData, identifier);
if (myOffset == notFound) {
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment