Title: [87406] trunk/Source/_javascript_Core
- Revision
- 87406
- Author
- [email protected]
- Date
- 2011-05-26 11:43:40 -0700 (Thu, 26 May 2011)
Log Message
2011-05-26 Geoffrey Garen <[email protected]>
Reviewed by Oliver Hunt.
Provide a real owner when copying a property table, for the sake of
write barriers.
https://bugs.webkit.org/show_bug.cgi?id=61547
No test because we can't enable the writeBarrier() ASSERT just yet.
* runtime/Structure.cpp:
(JSC::Structure::addPropertyTransition):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (87405 => 87406)
--- trunk/Source/_javascript_Core/ChangeLog 2011-05-26 18:34:52 UTC (rev 87405)
+++ trunk/Source/_javascript_Core/ChangeLog 2011-05-26 18:43:40 UTC (rev 87406)
@@ -1,3 +1,16 @@
+2011-05-26 Geoffrey Garen <[email protected]>
+
+ Reviewed by Oliver Hunt.
+
+ Provide a real owner when copying a property table, for the sake of
+ write barriers.
+ https://bugs.webkit.org/show_bug.cgi?id=61547
+
+ No test because we can't enable the writeBarrier() ASSERT just yet.
+
+ * runtime/Structure.cpp:
+ (JSC::Structure::addPropertyTransition):
+
2011-05-26 Adam Roben <[email protected]>
Windows build fix after r87346
Modified: trunk/Source/_javascript_Core/runtime/Structure.cpp (87405 => 87406)
--- trunk/Source/_javascript_Core/runtime/Structure.cpp 2011-05-26 18:34:52 UTC (rev 87405)
+++ trunk/Source/_javascript_Core/runtime/Structure.cpp 2011-05-26 18:43:40 UTC (rev 87406)
@@ -366,7 +366,7 @@
if (structure->m_propertyTable) {
if (structure->m_isPinnedPropertyTable)
- transition->m_propertyTable = structure->m_propertyTable->copy(globalData, 0, structure->m_propertyTable->size() + 1);
+ transition->m_propertyTable = structure->m_propertyTable->copy(globalData, transition, structure->m_propertyTable->size() + 1);
else
transition->m_propertyTable = structure->m_propertyTable.release();
} else {
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
