Closed Bug 953188 Opened 7 years ago Closed 7 years ago

Fix-up initialShapes when |proto| is in the Nursery

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 929546

People

(Reporter: terrence, Unassigned)

References

Details

Otherwise, we could get inproper re-use of an initial shape on a re-used proto address leading to subtle wrong behavior in the jits' shape caches.
We're going to handle this with bug 929546 now.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 929546
You need to log in before you can comment on or make changes to this bug.