Title: [221113] trunk/Source/_javascript_Core
- Revision
- 221113
- Author
- [email protected]
- Date
- 2017-08-23 15:53:14 -0700 (Wed, 23 Aug 2017)
Log Message
Unreviewed, debug build fix
https://bugs.webkit.org/show_bug.cgi?id=174355
* ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::compileGetMapBucketNext):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (221112 => 221113)
--- trunk/Source/_javascript_Core/ChangeLog 2017-08-23 22:33:15 UTC (rev 221112)
+++ trunk/Source/_javascript_Core/ChangeLog 2017-08-23 22:53:14 UTC (rev 221113)
@@ -1,3 +1,11 @@
+2017-08-23 Yusuke Suzuki <[email protected]>
+
+ Unreviewed, debug build fix
+ https://bugs.webkit.org/show_bug.cgi?id=174355
+
+ * ftl/FTLLowerDFGToB3.cpp:
+ (JSC::FTL::DFG::LowerDFGToB3::compileGetMapBucketNext):
+
2017-08-23 Michael Saboff <[email protected]>
REGRESSION (r221052): DumpRenderTree crashed in com.apple._javascript_Core: JSC::Yarr::YarrCodeBlock::execute + 137
Modified: trunk/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp (221112 => 221113)
--- trunk/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp 2017-08-23 22:33:15 UTC (rev 221112)
+++ trunk/Source/_javascript_Core/ftl/FTLLowerDFGToB3.cpp 2017-08-23 22:53:14 UTC (rev 221113)
@@ -8294,7 +8294,7 @@
if (m_node->bucketOwnerType() == BucketOwnerType::Map)
noBucketResult = m_out.anchor(weakPointer(vm().sentinelMapBucket.get()));
else {
- ASSERT(node->bucketOwnerType() == BucketOwnerType::Set);
+ ASSERT(m_node->bucketOwnerType() == BucketOwnerType::Set);
noBucketResult = m_out.anchor(weakPointer(vm().sentinelSetBucket.get()));
}
m_out.jump(continuation);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
