Title: [149861] branches/dfgFourthTier/Source/_javascript_Core
- Revision
- 149861
- Author
- [email protected]
- Date
- 2013-05-09 20:29:54 -0700 (Thu, 09 May 2013)
Log Message
fourthTier: DFG shouldn't allocate in the GC heap
https://bugs.webkit.org/show_bug.cgi?id=115598
Reviewed by Geoffrey Garen.
I believe that we've now fixed this, and this patch just adds the relevant assertion.
* runtime/JSCellInlines.h:
(JSC::JSCell::JSCell):
Modified Paths
Diff
Modified: branches/dfgFourthTier/Source/_javascript_Core/ChangeLog (149860 => 149861)
--- branches/dfgFourthTier/Source/_javascript_Core/ChangeLog 2013-05-10 02:45:10 UTC (rev 149860)
+++ branches/dfgFourthTier/Source/_javascript_Core/ChangeLog 2013-05-10 03:29:54 UTC (rev 149861)
@@ -1,5 +1,17 @@
2013-05-09 Filip Pizlo <[email protected]>
+ fourthTier: DFG shouldn't allocate in the GC heap
+ https://bugs.webkit.org/show_bug.cgi?id=115598
+
+ Reviewed by Geoffrey Garen.
+
+ I believe that we've now fixed this, and this patch just adds the relevant assertion.
+
+ * runtime/JSCellInlines.h:
+ (JSC::JSCell::JSCell):
+
+2013-05-09 Filip Pizlo <[email protected]>
+
fourthTier: CodeBlock should be RefCounted
https://bugs.webkit.org/show_bug.cgi?id=115594
Modified: branches/dfgFourthTier/Source/_javascript_Core/runtime/JSCellInlines.h (149860 => 149861)
--- branches/dfgFourthTier/Source/_javascript_Core/runtime/JSCellInlines.h 2013-05-10 02:45:10 UTC (rev 149860)
+++ branches/dfgFourthTier/Source/_javascript_Core/runtime/JSCellInlines.h 2013-05-10 03:29:54 UTC (rev 149861)
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2012 Apple Inc. All rights reserved.
+ * Copyright (C) 2012, 2013 Apple Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
@@ -32,16 +32,19 @@
#include "JSObject.h"
#include "JSString.h"
#include "Structure.h"
+#include <wtf/CompilationThread.h>
namespace JSC {
inline JSCell::JSCell(CreatingEarlyCellTag)
{
+ ASSERT(!isCompilationThread());
}
inline JSCell::JSCell(VM& vm, Structure* structure)
: m_structure(vm, this, structure)
{
+ ASSERT(!isCompilationThread());
}
inline void JSCell::finishCreation(VM& vm)
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
