Bug 211820

Summary: MovHint can see an arguments object be MovHinted to a Tmp
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED FIXED    
Severity: Normal CC: benjamin, fpizlo, ggaren, gskachkov, guijemont, keith_miller, mark.lam, msaboff, rmorisset, ross.kirsling, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch none

Description Saam Barati 2020-05-12 17:25:01 PDT 
Let's not assert it's not possible
Comment 1 Saam Barati 2020-05-12 17:27:25 PDT 
<rdar://problem/62882158>
Comment 2 Saam Barati 2020-05-12 17:42:39 PDT 
Created attachment 399209 [details]
patch
Comment 3 Keith Miller 2020-05-12 17:45:14 PDT 
Comment on attachment 399209 [details]
patch

r=me.
Comment 4 EWS 2020-05-13 00:24:17 PDT 
Committed r261603: <https://trac.webkit.org/changeset/261603>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 399209 [details].