Title: [173828] releases/WebKitGTK/webkit-2.6/Source/_javascript_Core
Revision
173828
Author
[email protected]
Date
2014-09-22 03:32:19 -0700 (Mon, 22 Sep 2014)

Log Message

Merge r173787 - Leak of mallocs under StructureSet::OutOfLineList::create
https://bugs.webkit.org/show_bug.cgi?id=136970

Reviewed by Filip Pizlo.

addOutOfLine should free the old list when expanding the capacity.

* bytecode/StructureSet.cpp:
(JSC::StructureSet::addOutOfLine):

Modified Paths

Diff

Modified: releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/ChangeLog (173827 => 173828)


--- releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/ChangeLog	2014-09-22 10:29:43 UTC (rev 173827)
+++ releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/ChangeLog	2014-09-22 10:32:19 UTC (rev 173828)
@@ -1,3 +1,15 @@
+2014-09-19  Ryosuke Niwa  <[email protected]>
+
+        Leak of mallocs under StructureSet::OutOfLineList::create
+        https://bugs.webkit.org/show_bug.cgi?id=136970
+
+        Reviewed by Filip Pizlo.
+
+        addOutOfLine should free the old list when expanding the capacity.
+
+        * bytecode/StructureSet.cpp:
+        (JSC::StructureSet::addOutOfLine):
+
 2014-09-18  Joseph Pecoraro  <[email protected]>
 
         Unreviewed rollout r173731. Broke multiple builds.

Modified: releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/bytecode/StructureSet.cpp (173827 => 173828)


--- releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/bytecode/StructureSet.cpp	2014-09-22 10:29:43 UTC (rev 173827)
+++ releases/WebKitGTK/webkit-2.6/Source/_javascript_Core/bytecode/StructureSet.cpp	2014-09-22 10:32:19 UTC (rev 173828)
@@ -357,6 +357,7 @@
     for (unsigned i = list->m_length; i--;)
         newList->list()[i] = list->list()[i];
     newList->list()[list->m_length] = structure;
+    OutOfLineList::destroy(list);
     set(newList);
     return true;
 }
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to