Title: [266795] trunk/Source/_javascript_Core
- Revision
- 266795
- Author
- [email protected]
- Date
- 2020-09-09 12:41:23 -0700 (Wed, 09 Sep 2020)
Log Message
BigInt should PACCage its data pointer
https://bugs.webkit.org/show_bug.cgi?id=216319
Reviewed by Yusuke Suzuki.
* runtime/JSBigInt.h:
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (266794 => 266795)
--- trunk/Source/_javascript_Core/ChangeLog 2020-09-09 18:46:00 UTC (rev 266794)
+++ trunk/Source/_javascript_Core/ChangeLog 2020-09-09 19:41:23 UTC (rev 266795)
@@ -1,3 +1,12 @@
+2020-09-09 Keith Miller <[email protected]>
+
+ BigInt should PACCage its data pointer
+ https://bugs.webkit.org/show_bug.cgi?id=216319
+
+ Reviewed by Yusuke Suzuki.
+
+ * runtime/JSBigInt.h:
+
2020-09-09 Alexey Shvayka <[email protected]>
Don't emitDirectBinding() if there is a [...rest] element binding
Modified: trunk/Source/_javascript_Core/runtime/JSBigInt.h (266794 => 266795)
--- trunk/Source/_javascript_Core/runtime/JSBigInt.h 2020-09-09 18:46:00 UTC (rev 266794)
+++ trunk/Source/_javascript_Core/runtime/JSBigInt.h 2020-09-09 19:41:23 UTC (rev 266795)
@@ -575,7 +575,7 @@
const unsigned m_length;
bool m_sign { false };
- CagedBarrierPtr<Gigacage::Primitive, Digit> m_data;
+ CagedBarrierPtr<Gigacage::Primitive, Digit, tagCagedPtr> m_data;
};
inline JSBigInt* asHeapBigInt(JSValue value)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
