commit bc96e8fd8b7a82cbc8afae59e3a98a1931d0f994
author fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 23 23:12:59 2012 +0000
committer fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 23 23:12:59 2012 +0000
tree d549efc2edfea11a6aa6a638807e7559044ad5ab
parent a484ae65cee7868120a11a8ff15fbbaa4d42622f

Use after free in JSC::DFG::ByteCodeParser::processPhiStack
https://bugs.webkit.org/show_bug.cgi?id=87312
<rdar://problem/11518848>

Reviewed by Oliver Hunt.

* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::processPhiStack):
(JSC::DFG::ByteCodeParser::parse):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@118262 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/JavaScriptCore/ChangeLog

diff --git a/Source/JavaScriptCore/ChangeLog b/Source/JavaScriptCore/ChangeLog
index 0efdc66..b56f5e1 100644
--- a/Source/JavaScriptCore/ChangeLog
+++ b/Source/JavaScriptCore/ChangeLog
@@ -1,5 +1,17 @@
 2012-05-23  Filip Pizlo  <fpizlo@apple.com>
 
+        Use after free in JSC::DFG::ByteCodeParser::processPhiStack
+        https://bugs.webkit.org/show_bug.cgi?id=87312
+        <rdar://problem/11518848>
+
+        Reviewed by Oliver Hunt.
+
+        * dfg/DFGByteCodeParser.cpp:
+        (JSC::DFG::ByteCodeParser::processPhiStack):
+        (JSC::DFG::ByteCodeParser::parse):
+
+2012-05-23  Filip Pizlo  <fpizlo@apple.com>
+
         It should be possible to make C function calls from DFG code on ARM in debug mode
         https://bugs.webkit.org/show_bug.cgi?id=87313