Closed
Bug 953188
Opened 9 years ago
Closed 9 years ago
Fix-up initialShapes when |proto| is in the Nursery
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
DUPLICATE
of bug 929546
People
(Reporter: terrence, Unassigned)
References
Details
Otherwise, we could get inproper re-use of an initial shape on a re-used proto address leading to subtle wrong behavior in the jits' shape caches.
Comment 1•9 years ago
|
||
We're going to handle this with bug 929546 now.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•