Bug 150902
| Summary: | Using emitResolveScope & emitGetFromScope with 'this' that is TDZ lead to segfault in DFG | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | GSkachkov <gskachkov> | ||||||
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> | ||||||
| Status: | RESOLVED FIXED | ||||||||
| Severity: | Normal | CC: | commit-queue, fpizlo, ggaren, saam | ||||||
| Priority: | P2 | ||||||||
| Version: | WebKit Nightly Build | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Bug Depends on: | |||||||||
| Bug Blocks: | 149338 | ||||||||
| Attachments: |
|
||||||||
2015-11-05 08:23 PST, GSkachkov
2015-11-05 08:24 PST, GSkachkov