[Webkit-unassigned] [Bug 77070] All DFG helpers that may call out to arbitrary JS code must know where they were called from due to inlining and call stack walking

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jan 25 22:38:14 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=77070


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #124060|0                           |1
        is obsolete|                            |
 Attachment #124066|                            |review?
               Flag|                            |




--- Comment #6 from Filip Pizlo <fpizlo at apple.com>  2012-01-25 22:38:14 PST ---
Created an attachment (id=124066)
 --> (https://bugs.webkit.org/attachment.cgi?id=124066&action=review)
the patch

- hopefully fixed build issues, but not sure, because I don't see them on my box.

- added loads of tests.

- found one additional, related, bug that the testing revealed: inlining code was not correctly setting aside all 6 call frame slots because of an off-by-one bug.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list