Changeset 195398 in webkit
- Timestamp:
- Jan 20, 2016 8:47:23 PM (8 years ago)
- Location:
- trunk/Source/JavaScriptCore
- Files:
-
- 1 deleted
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/JavaScriptCore/ChangeLog
r195395 r195398 1 2016-01-20 Commit Queue <commit-queue@webkit.org> 2 3 Unreviewed, rolling out r195375. 4 https://bugs.webkit.org/show_bug.cgi?id=153300 5 6 Caused crashes on GuardMalloc (Requested by ap on #webkit). 7 8 Reverted changeset: 9 10 "TypedArray's .buffer does not return the JSArrayBuffer that 11 was passed to it on creation." 12 https://bugs.webkit.org/show_bug.cgi?id=153281 13 http://trac.webkit.org/changeset/195375 14 1 15 2016-01-19 Filip Pizlo <fpizlo@apple.com> 2 16 -
trunk/Source/JavaScriptCore/runtime/JSArrayBuffer.cpp
r195375 r195398 45 45 Base::finishCreation(vm); 46 46 vm.heap.addReference(this, m_impl); 47 m_impl->m_wrapper = this;48 47 } 49 48
Note: See TracChangeset
for help on using the changeset viewer.