Title: [287003] branches/safari-613.1.11-branch/Source/_javascript_Core
- Revision
- 287003
- Author
- repst...@apple.com
- Date
- 2021-12-13 19:27:43 -0800 (Mon, 13 Dec 2021)
Log Message
Revert "Revert r286382. rdar://problem/86408710"
This reverts commit r286996.
Modified Paths
Diff
Modified: branches/safari-613.1.11-branch/Source/_javascript_Core/ChangeLog (287002 => 287003)
--- branches/safari-613.1.11-branch/Source/_javascript_Core/ChangeLog 2021-12-14 02:42:38 UTC (rev 287002)
+++ branches/safari-613.1.11-branch/Source/_javascript_Core/ChangeLog 2021-12-14 03:27:43 UTC (rev 287003)
@@ -1,7 +1,3 @@
-2021-12-13 Alan Coon <alanc...@apple.com>
-
- Revert r286382. rdar://problem/86408710
-
2021-12-03 Keith Miller <keith_mil...@apple.com>
Remove StructureIDBlob
Modified: branches/safari-613.1.11-branch/Source/_javascript_Core/runtime/StructureChain.cpp (287002 => 287003)
--- branches/safari-613.1.11-branch/Source/_javascript_Core/runtime/StructureChain.cpp 2021-12-14 02:42:38 UTC (rev 287002)
+++ branches/safari-613.1.11-branch/Source/_javascript_Core/runtime/StructureChain.cpp 2021-12-14 03:27:43 UTC (rev 287003)
@@ -49,6 +49,7 @@
++size; // Sentinel nullptr.
size_t bytes = Checked<size_t>(size) * sizeof(StructureID);
void* vector = vm.jsValueGigacageAuxiliarySpace().allocateNonVirtual(vm, bytes, nullptr, AllocationFailureMode::Assert);
+ static_assert(!StructureID().bits(), "Make sure the value we're going to memcpy below matches the default StructureID");
memset(vector, 0, bytes);
StructureChain* chain = new (NotNull, allocateCell<StructureChain>(vm)) StructureChain(vm, vm.structureChainStructure.get(), static_cast<StructureID*>(vector));
chain->finishCreation(vm, head);
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
