Changeset 80751 in webkit for trunk/Source/JavaScriptCore/runtime/JSValue.h

Timestamp:

Mar 10, 2011, 1:12:54 PM (14 years ago)

Author:

[email protected]

Message:

2011-03-10 Oliver Hunt <​[email protected]>

Reviewed by Gavin Barraclough.

Fix allocation of native function with a cached thunk
​https://bugs.webkit.org/show_bug.cgi?id=56127

Fix this race condition found while fixing zombies.

• collector/handles/HandleHeap.cpp: (JSC::HandleHeap::clearWeakPointers):
• runtime/Heap.cpp: (JSC::Heap::reset):
• runtime/JSFunction.cpp: (JSC::JSFunction::JSFunction): (JSC::JSFunction::markChildren):
• runtime/JSValue.h: (JSC::JSValue::decode):
• runtime/JSZombie.cpp: (JSC::JSZombie::leakedZombieStructure):
• runtime/JSZombie.h: (JSC::JSZombie::createStructure):
• runtime/MarkedBlock.cpp:

File:

• trunk/Source/JavaScriptCore/runtime/JSValue.h (modified) (1 diff)

trunk/Source/JavaScriptCore/runtime/JSValue.h

@@ -393 +393 @@
         JSValue v;
         v.u.asEncodedJSValue = encodedJSValue;
-#if ENABLE(JSC_ZOMBIES)
-        ASSERT(!v.isZombie());
-#endif
         return v;
     }