Open Bug 1437103 Opened 2 years ago Updated Last year
[Meta] Spectre mitigations for object type checks
This includes: * Ion object type barriers * Ion shape/group/class guards * Shape/group/class guards on the holder object in GetProp/GetName/GetElem ICs We should have separate bugs for each of these.
Moving to p3 because no activity for at least 24 weeks. See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information
Priority: P1 → P3
You need to log in before you can comment on or make changes to this bug.