[Webkit-unassigned] [Bug 119140] REGRESSION: Crash beneath cti_vm_throw_slowpath due to invalid CallFrame pointer

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=119140





--- Comment #13 from Julien Brianceau <jbrianceau at nds.com>  2013-07-31 12:33:18 PST ---
(In reply to comment #11)
> (From update of attachment 207819 [details])
> Should we be using vm->getCTIStub(nativeCallGenerator) here instead, like the 64bit JIT does?
I've just tried and it doesn't solve the issue: not better, not worst. If I replace the whole function implementation by vm->getCTIStub(nativeCallGenerator), I still get "28 regressions found" with run-javascriptcore-tests and "405 tests passed, 52 tests failed, 22 tests crashed" with run-fast-jsc

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.