Changeset 128667 in webkit for trunk/Source/JavaScriptCore/ChangeLog
- Timestamp:
- Sep 14, 2012, 4:13:07 PM (13 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/JavaScriptCore/ChangeLog
r128658 r128667 1 2012-09-14 Filip Pizlo <[email protected]> 2 3 bbc homepage crashes immediately 4 https://bugs.webkit.org/show_bug.cgi?id=96812 5 <rdar://problem/12081386> 6 7 Reviewed by Oliver Hunt. 8 9 If you use the old storage pointer to write to space you thought was newly allocated, 10 you're going to have a bad time. 11 12 * runtime/JSArray.cpp: 13 (JSC::JSArray::unshiftCount): 14 1 15 2012-09-14 Adam Barth <[email protected]> 2 16
Note:
See TracChangeset
for help on using the changeset viewer.