Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-08 20:47:44 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[INFER] FrameState::isEntryCopied shouldn't look at entries not on the stack, bug 640102.

Browse Source
This commit is contained in:
Brian Hackett 2011-03-10 08:25:22 -08:00
parent d22821371f
commit d49fd49233
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
js/src/jit-test/tests/jaeger/bug640102.js Normal file
View File

@ -0,0 +1,3 @@
try {
eval("v>>([]=x)")
} catch (e) {}

2
js/src/methodjit/FrameState.cpp
View File

@ -216,7 +216,7 @@ FrameState::isEntryCopied(FrameEntry *fe) const
for (uint32 i = fe->trackerIndex() + 1; i < tracker.nentries; i++) {
FrameEntry *nfe = tracker[i];
if (nfe->isCopy() && nfe->copyOf() == fe)
if (nfe < sp && nfe->isCopy() && nfe->copyOf() == fe)
return true;
}