18 Jun
2009
18 Jun
'09
6:56 a.m.
Roll out r43849 as it appears that we cannot rely on the address of an objects property storage being constant even if the structure is unchanged.
Did you figure out why we can't rely on the address of an object's property storage being constant even if its structure is unchanged? It's fine to roll out the change to fix the crash for now, but I'd rather not lose this speedup. Do we need a bug for figuring out what's going on here and rolling back in the optimization? Geoff