flattenDictionaryStructure needs to zero properties that have been compressed away
authorkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 20 Jun 2018 01:28:03 +0000 (01:28 +0000)
committerkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 20 Jun 2018 01:28:03 +0000 (01:28 +0000)
commit2ac4be86c6108d082b65db2f38b4dcdc5f3cea9f
tree0aea5ee9b1d4d0976bcfd1d1017e2e9fc08e147b
parentafdef3172de6eb0c7ef1c1e1e2d736debec4d7b7
flattenDictionaryStructure needs to zero properties that have been compressed away
https://bugs.webkit.org/show_bug.cgi?id=186828

Reviewed by Mark Lam.

This patch fixes a bunch of crashing Mozilla tests on the bots.

* runtime/Structure.cpp:
(JSC::Structure::flattenDictionaryStructure):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@233001 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/Structure.cpp