Changeset 90282 in webkit for trunk/Source/JavaScriptCore/ChangeLog

Timestamp:

Jul 1, 2011, 3:02:54 PM (14 years ago)

Author:

[email protected]

Message:

2011-07-01 Oliver Hunt <​[email protected]>

IE Web Workers demo crashes in JSC::SlotVisitor::visitChildren()
​https://bugs.webkit.org/show_bug.cgi?id=63732

Reviewed by Gavin Barraclough.

Initialise the memory at the head of the new storage so that
GC is safe if triggered by reportExtraMemoryCost.

• runtime/JSArray.cpp: (JSC::JSArray::increaseVectorPrefixLength):

File:

• trunk/Source/JavaScriptCore/ChangeLog (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2011-07-01  Oliver Hunt  <[email protected]>
+
+        IE Web Workers demo crashes in JSC::SlotVisitor::visitChildren()
+        https://bugs.webkit.org/show_bug.cgi?id=63732
+
+        Reviewed by Gavin Barraclough.
+
+        Initialise the memory at the head of the new storage so that
+        GC is safe if triggered by reportExtraMemoryCost.
+
+        * runtime/JSArray.cpp:
+        (JSC::JSArray::increaseVectorPrefixLength):
+
 2011-07-01  Oliver Hunt  <[email protected]>