Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-07 12:15:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Backout 5c4e5ee49fbe for bustage on a CLOSED TREE.

Browse Source
This commit is contained in:
Terrence Cole 2013-08-21 16:47:19 -07:00
parent cbb7aa23bc
commit 138f7551c4
2 changed files with 1 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
js/src/jit-test/tests/gc/bug-906241.js
View File

@ -1,8 +0,0 @@
for (let y in []);
(function f(x) {
Float64Array(ArrayBuffer());
{
f(x)
function t() {}
}
})();

12
js/src/jit/VMFunctions.cpp
View File

@ -458,17 +458,7 @@ JSObject *
NewCallObject(JSContext *cx, HandleScript script,
HandleShape shape, HandleTypeObject type, HeapSlot *slots)
{
JSObject *obj = CallObject::create(cx, script, shape, type, slots);
#ifdef JSGC_GENERATIONAL
// The JIT creates call objects in the nursery, so elides barriers for
// the initializing writes. The interpreter, however, may have allocated
// the call object tenured, so barrier as needed before re-entering.
if (!IsInsideNursery(cx->runtime(), obj))
cx->runtime()->gcStoreBuffer.putWholeCell(obj);
#endif
return obj;
return CallObject::create(cx, script, shape, type, slots);
}
JSObject *