|JSObject::allocKindForTenure| doesn't return a background allocation kind for TypedArray objects from JIT code with non-inline elements, which means these TypedArray objects are always finalized on the main thread. It's not entirely clear to me if foreground finalization is required in this case or just an oversight. If it is the former, the code should be commented accordingly to explain the rationale. But if it's the latter, we should apply the attached patch.
Nice catch! I can't see any reason why we need to finalize TypedArray objects on the main thread and the tests pass locally with this patch.
Assignee: nobody → andrebargull
Status: NEW → ASSIGNED
You need to log in before you can comment on or make changes to this bug.