Searched refs:baseCell (Results 1 – 3 of 3) sorted by relevance
1214 JSCell* baseCell = baseValue.asCell(); in tryCachePutByID() local1215 Structure* structure = baseCell->structure(); in tryCachePutByID()1239 if (baseCell != slot.base()) { in tryCachePutByID()1252 normalizePrototypeChain(callFrame, baseCell); in tryCachePutByID()2518 JSCell* baseCell = baseValue.asCell(); in privateExecute() local2521 if (LIKELY(baseCell->structure() == structure)) { in privateExecute()2522 ASSERT(baseCell->isObject()); in privateExecute()2523 JSObject* baseObject = asObject(baseCell); in privateExecute()2549 JSCell* baseCell = baseValue.asCell(); in privateExecute() local2552 if (LIKELY(baseCell->structure() == structure)) { in privateExecute()[all …]
819 JSCell* baseCell = baseValue.asCell(); in tryCachePutByID() local820 Structure* structure = baseCell->structure(); in tryCachePutByID()828 if (baseCell != slot.base()) { in tryCachePutByID()843 normalizePrototypeChain(callFrame, baseCell); in tryCachePutByID()887 JSCell* baseCell = baseValue.asCell(); in tryCacheGetByID() local888 Structure* structure = baseCell->structure(); in tryCacheGetByID()
7460 The bug was caused by incorrect use of baseCell instead of baseValue,7462 correct this object), baseCell is clobbered as part of walking the