Concurrent FTL causes !hasOptimizedReplacement() asserts in cti_optimize
[WebKit-https.git] / Source / JavaScriptCore / ChangeLog
index 751304f57e5c2ad70fe0e328badd83fe5773b094..39dc8b34e9b80d4245a8b74d02b81471cbf43bad 100644 (file)
@@ -1,3 +1,15 @@
+2013-09-06  Filip Pizlo  <fpizlo@apple.com>
+
+        Concurrent FTL causes !hasOptimizedReplacement() asserts in cti_optimize
+        https://bugs.webkit.org/show_bug.cgi?id=120890
+
+        Reviewed by Mark Hahnenberg.
+        
+        Don't install an FTL code block if the DFG code block has already been jettisoned.
+
+        * dfg/DFGToFTLDeferredCompilationCallback.cpp:
+        (JSC::DFG::ToFTLDeferredCompilationCallback::compilationDidComplete):
+
 2013-09-06  Filip Pizlo  <fpizlo@apple.com>
 
         REGRESSION(149636, merged in 153145): ToThis conversion doesn't work in the DFG