Closed Bug 953188 Opened 7 years ago Closed 7 years ago

Fix-up initialShapes when |proto| is in the Nursery

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 929546

People

(Reporter: terrence, Unassigned)

References

Details

Otherwise, we could get inproper re-use of an initial shape on a re-used proto address leading to subtle wrong behavior in the jits' shape caches.
We're going to handle this with bug 929546 now.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 929546
You need to log in before you can comment on or make changes to this bug.