Bug 183942

Summary: LLInt TypeArray pointer poisoning should not pick its poison dynamically.
Product: WebKit Reporter: Mark Lam <mark.lam>
Component: JavaScriptCoreAssignee: Mark Lam <mark.lam>
Status: RESOLVED FIXED    
Severity: Normal CC: fpizlo, jfbastien, keith_miller, msaboff, rmorisset, saam, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
proposed patch. jfbastien: review+

Mark Lam
Reported 2018-03-23 10:24:32 PDT
Patch coming.
Attachments
proposed patch. (8.20 KB, patch)
2018-03-23 10:40 PDT, Mark Lam 		jfbastien: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2018-03-23 10:25:25 PDT
<rdar://problem/38798018>
Mark Lam
Comment 2 2018-03-23 10:40:31 PDT
Created attachment 336387 [details] proposed patch.
JF Bastien
Comment 3 2018-03-23 10:46:13 PDT
Comment on attachment 336387 [details] proposed patch. r=me
Mark Lam
Comment 4 2018-03-23 11:56:29 PDT
Thanks for the review. Landed in r229912: <http://trac.webkit.org/r229912>.
Note You need to log in before you can comment on or make changes to this bug.