Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-25 03:05:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Backed out changeset dcf8fc5c0f34 (bug 1264948)

Browse Source
This commit is contained in:
Sebastian Hengst 2016-06-10 19:34:43 +02:00
parent a6e15974a7
commit 484bd75c57
2 changed files with 1 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
js/src/jit-test/tests/ion/bug1264948-1.js
View File

@ -1,9 +0,0 @@
// |jit-test| error: ReferenceError
var N = 70 * 1000;
var x = build("&&")();
function build(operation) {
var a = [];
for (var i = 1; i != N - 1; ++i) a.push("f()");
return new Function(a.join(operation));
}

8
js/src/jit/IonBuilder.cpp
View File

@ -766,13 +766,7 @@ IonBuilder::pushLoop(CFGState::State initial, jsbytecode* stopAt, MBasicBlock* e
bool
IonBuilder::init()
{
{
LifoAlloc::AutoFallibleScope fallibleAllocator(alloc().lifoAlloc());
if (!TypeScript::FreezeTypeSets(constraints(), script(), &thisTypes, &argTypes, &typeArray))
return false;
}
if (!alloc().ensureBallast())
if (!TypeScript::FreezeTypeSets(constraints(), script(), &thisTypes, &argTypes, &typeArray))
return false;
if (inlineCallInfo_) {