diff --git a/js/src/jit-test/tests/ion/bug1264948-1.js b/js/src/jit-test/tests/ion/bug1264948-1.js deleted file mode 100644 index 1070275dce1d..000000000000 --- a/js/src/jit-test/tests/ion/bug1264948-1.js +++ /dev/null @@ -1,9 +0,0 @@ -// |jit-test| error: ReferenceError - -var N = 70 * 1000; -var x = build("&&")(); -function build(operation) { - var a = []; - for (var i = 1; i != N - 1; ++i) a.push("f()"); - return new Function(a.join(operation)); -} diff --git a/js/src/jit/IonBuilder.cpp b/js/src/jit/IonBuilder.cpp index 61f9df1aba22..af71ed308337 100644 --- a/js/src/jit/IonBuilder.cpp +++ b/js/src/jit/IonBuilder.cpp @@ -766,13 +766,7 @@ IonBuilder::pushLoop(CFGState::State initial, jsbytecode* stopAt, MBasicBlock* e bool IonBuilder::init() { - { - LifoAlloc::AutoFallibleScope fallibleAllocator(alloc().lifoAlloc()); - if (!TypeScript::FreezeTypeSets(constraints(), script(), &thisTypes, &argTypes, &typeArray)) - return false; - } - - if (!alloc().ensureBallast()) + if (!TypeScript::FreezeTypeSets(constraints(), script(), &thisTypes, &argTypes, &typeArray)) return false; if (inlineCallInfo_) {