Title: [262393] trunk/Source/_javascript_Core
- Revision
- 262393
- Author
- ysuz...@apple.com
- Date
- 2020-06-01 14:02:32 -0700 (Mon, 01 Jun 2020)
Log Message
Unreviewed, fix build failure in ARMv7k
https://bugs.webkit.org/show_bug.cgi?id=212595
* runtime/JSCJSValue.cpp:
(JSC::JSValue::toThisSlowCase const):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (262392 => 262393)
--- trunk/Source/_javascript_Core/ChangeLog 2020-06-01 20:27:12 UTC (rev 262392)
+++ trunk/Source/_javascript_Core/ChangeLog 2020-06-01 21:02:32 UTC (rev 262393)
@@ -1,5 +1,13 @@
2020-06-01 Yusuke Suzuki <ysuz...@apple.com>
+ Unreviewed, fix build failure in ARMv7k
+ https://bugs.webkit.org/show_bug.cgi?id=212595
+
+ * runtime/JSCJSValue.cpp:
+ (JSC::JSValue::toThisSlowCase const):
+
+2020-06-01 Yusuke Suzuki <ysuz...@apple.com>
+
[JSC] JSBigInt::rightTrim can miss |this| pointer and leads to incorrect GC collection
https://bugs.webkit.org/show_bug.cgi?id=212601
Modified: trunk/Source/_javascript_Core/runtime/JSCJSValue.cpp (262392 => 262393)
--- trunk/Source/_javascript_Core/runtime/JSCJSValue.cpp 2020-06-01 20:27:12 UTC (rev 262392)
+++ trunk/Source/_javascript_Core/runtime/JSCJSValue.cpp 2020-06-01 21:02:32 UTC (rev 262393)
@@ -118,8 +118,6 @@
JSValue JSValue::toThisSlowCase(JSGlobalObject* globalObject, ECMAMode ecmaMode) const
{
- VM& vm = globalObject->vm();
-
ASSERT(!isCell());
if (ecmaMode.isStrict())
@@ -131,7 +129,7 @@
return constructBooleanFromImmediateBoolean(globalObject, asValue());
#if USE(BIGINT32)
if (isBigInt32())
- return BigIntObject::create(vm, globalObject, *this);
+ return BigIntObject::create(globalObject->vm(), globalObject, *this);
#endif
ASSERT(isUndefinedOrNull());
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
