[Webkit-unassigned] [Bug 117749] New: Inline call frames fail to initialize unmodified argument slot correctly

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jun 18 12:40:46 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=117749

           Summary: Inline call frames fail to initialize unmodified
                    argument slot correctly
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: oliver at apple.com, fpizlo at apple.com


function g() { f(i) }
function f() { arguments; doStuff();  }
function doStuff() { throw f.arguments; }

var h;

for (var i = 0; i < 100; i++) { try { g() } catch (e) { if (!h) h = e; } }

print(h[0]);

or 

function g() { f(i) }
function f() { arguments; doStuff();  }
function doStuff() { throw f.arguments; }

var h;

for (var i = 0; i < 100; i++) { try { g() } catch (e) { if (i == 90) h = e; } }

print(h[0]);

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list