Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-02-12 18:50:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[INFER] Avoid spurious censoring of type barriers on writes of 'undefined' to singleton objects, bug 682345.

Browse Source
This commit is contained in:
Brian Hackett 2011-08-26 20:21:59 -07:00
parent a6edf630e5
commit f2f576fcd3
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
js/src/jit-test/tests/jaeger/bug682345.js Normal file
View File

@ -0,0 +1,15 @@
for (var i = 0; i <= 0x017f; i++) {
var U = new Unicode(i);
}
function Unicode(c) {
u = GetUnicodeValues(c);
this.upper = u[0];
}
function GetUnicodeValues(c) {
u = new Array();
if ((c >= 0x0100 && c < 0x0138) || (c > 0x0149 && c < 0x0178)) try {} finally {
return;
}
return u;
}

2
js/src/jsinfer.cpp
View File

@ -2262,7 +2262,7 @@ ScriptAnalysis::addTypeBarrier(JSContext *cx, const jsbytecode *pc, TypeSet *tar
/* Ignore duplicate barriers. */
TypeBarrier *barrier = code.typeBarriers;
while (barrier) {
if (barrier->target == target && barrier->type == type)
if (barrier->target == target && barrier->type == type && !barrier->singleton)
return;
barrier = barrier->next;
}