Changeset 190809 in webkit for trunk/Source/JavaScriptCore/runtime/CommonSlowPaths.h

Timestamp:

Oct 9, 2015, 10:54:16 AM (10 years ago)

Author:

[email protected]

Message:

2015-10-09 Geoffrey Garen <​[email protected]>

Unreviewed, rolling out r190694
​https://bugs.webkit.org/show_bug.cgi?id=148560

Crashes seen on PLT bots and facebook.com.

Reverted changesets:

"CodeBlock should be a GC object"
​https://bugs.webkit.org/show_bug.cgi?id=149727
​http://trac.webkit.org/changeset/190694

File:

• trunk/Source/JavaScriptCore/runtime/CommonSlowPaths.h (modified) (2 diffs)

trunk/Source/JavaScriptCore/runtime/CommonSlowPaths.h

@@ -130 +130 @@
 
         ConcurrentJITLocker locker(codeBlock->m_lock);
-        pc[5].u.structure.set(exec->vm(), codeBlock, scope->structure());
+        pc[5].u.structure.set(exec->vm(), codeBlock->ownerExecutable(), scope->structure());
         pc[6].u.operand = slot.cachedOffset();
     }
@@ -163 +163 @@
             {
                 ConcurrentJITLocker locker(codeBlock->m_lock);
-                pc[5].u.structure.set(exec->vm(), codeBlock, structure);
+                pc[5].u.structure.set(exec->vm(), codeBlock->ownerExecutable(), structure);
                 pc[6].u.operand = slot.cachedOffset();
             }