mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-14 10:43:24 +00:00
Fixed potential crash if up-recursive trace compiles and runs before down-recursive trace (build bustage, no_r=me).
This commit is contained in:
parent
293e13ba18
commit
3dbb9078fb
@ -5722,6 +5722,8 @@ AttemptToStabilizeTree(JSContext* cx, JSObject* globalObj, VMSideExit* exit, jsb
|
||||
if (exit->recursive_pc != cx->fp->regs->pc)
|
||||
return false;
|
||||
from = getLoop(tm, exit->recursive_pc, from->globalObj, from->globalShape, cx->fp->argc);
|
||||
if (!from)
|
||||
return false;
|
||||
/* use stale TI for RecordTree - since from might not have one anymore. */
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user