Changeset 45039 in webkit for trunk/JavaScriptCore/runtime/StructureChain.cpp

Timestamp:

Jun 23, 2009, 7:47:48 PM (16 years ago)

Author:

[email protected]

Message:

<rdar://problem/6992806> REGRESSION: Enumeration can skip new properties in cases of prototypes that have more than 64 (26593)
<​https://bugs.webkit.org/show_bug.cgi?id=26593>

Reviewed by Gavin Barraclough.

Add tests to ensure we correctly invalidate caching that depends on structure chains
that include dictionaries.

File:

• trunk/JavaScriptCore/runtime/StructureChain.cpp (modified) (1 diff)

trunk/JavaScriptCore/runtime/StructureChain.cpp

@@ -47 +47 @@
 }
 
+bool StructureChain::isCacheable() const
+{
+    uint32_t i = 0;
+    
+    while (m_vector[i]) {
+        if (m_vector[i++]->isDictionary())
+            return false;
+    }
+    return true;
+}
+
 } // namespace JSC