ObjectPropertyConditionSet::mergedWith does not produce a minimal intersection.
authorkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 28 Sep 2015 19:08:42 +0000 (19:08 +0000)
committerkeith_miller@apple.com <keith_miller@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 28 Sep 2015 19:08:42 +0000 (19:08 +0000)
commitdf411e7cc944c9ef606a0873199d5aa1bbe05de4
treee14b11a68a0c00f0bbce897b6e6939a940743a46
parent67cb98a5e767eb7ad05d06579cde5db568793a6c
ObjectPropertyConditionSet::mergedWith does not produce a minimal intersection.
https://bugs.webkit.org/show_bug.cgi?id=149598

Reviewed by Michael Saboff.

mergedWith sometimes creates duplicates of an ObjectPropertyCondition, which causes GetByIdVariant
in believe that the condition has more than one slotBaseCondition when only one was necessary.

* bytecode/ObjectPropertyConditionSet.cpp:
(JSC::ObjectPropertyConditionSet::mergedWith):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@190283 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/bytecode/ObjectPropertyConditionSet.cpp