Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-13 05:15:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1024444 - Fix minor bug with arguments object aliasing and Baseline. r=luke

Browse Source
This commit is contained in:
Jan de Mooij 2014-06-17 11:28:41 +02:00
parent 36dd834e0d
commit d17937b94f
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
js/src/jit-test/tests/baseline/bug1024444.js Normal file
View File

@ -0,0 +1,7 @@
function f(x) {
x = eval("a = arguments.callee.arguments; 10");
}
for (var i=0; i<5; i++) {
f(5);
assertEq(a[0], 10);
}

2
js/src/vm/ArgumentsObject.cpp
View File

@ -156,7 +156,7 @@ struct CopyScriptFrameIterArgs
* invalid.
*/
void maybeForwardToCallObject(JSObject *obj, ArgumentsData *data) {
if (!iter_.isJit())
if (!iter_.isIon())
ArgumentsObject::MaybeForwardToCallObject(iter_.abstractFramePtr(), obj, data);
}
};