Title: [131509] trunk/Source/_javascript_Core
- Revision
- 131509
- Author
- [email protected]
- Date
- 2012-10-16 14:59:35 -0700 (Tue, 16 Oct 2012)
Log Message
Accidental switch fall-through in DFG::FixupPhase
https://bugs.webkit.org/show_bug.cgi?id=96956
<rdar://problem/12313242>
Reviewed by Mark Hahnenberg.
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (131508 => 131509)
--- trunk/Source/_javascript_Core/ChangeLog 2012-10-16 21:58:20 UTC (rev 131508)
+++ trunk/Source/_javascript_Core/ChangeLog 2012-10-16 21:59:35 UTC (rev 131509)
@@ -1,5 +1,16 @@
2012-10-16 Filip Pizlo <[email protected]>
+ Accidental switch fall-through in DFG::FixupPhase
+ https://bugs.webkit.org/show_bug.cgi?id=96956
+ <rdar://problem/12313242>
+
+ Reviewed by Mark Hahnenberg.
+
+ * dfg/DFGFixupPhase.cpp:
+ (JSC::DFG::FixupPhase::fixupNode):
+
+2012-10-16 Filip Pizlo <[email protected]>
+
GetScopedVar CSE matches dead GetScopedVar's leading to IR corruption
https://bugs.webkit.org/show_bug.cgi?id=99470
<rdar://problem/12363698>
Modified: trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp (131508 => 131509)
--- trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2012-10-16 21:58:20 UTC (rev 131508)
+++ trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2012-10-16 21:59:35 UTC (rev 131509)
@@ -148,6 +148,7 @@
case ArrayPop: {
blessArrayOperation(node.child1(), node.child2(), 1);
+ break;
}
case ValueToInt32: {
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo/webkit-changes
