[Webkit-unassigned] [Bug 127902] Fix the remaining regression caused by the jsCStack branch merge on Linux platforms

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 25 10:19:47 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=127902





--- Comment #10 from Mark Lam <mark.lam at apple.com>  2014-02-25 10:16:53 PST ---
(In reply to comment #8)
> Look at what is in VM::m_jsStackLimit (0x44e828 for this code block, but different for each VM).  Looking at this, I see a minor bug, but I don't think it affects you.  We are using m_jsStackLimit and not m_stackLimit for the stack check.  This is fine if you use the standard LLInt, but is broken if you use the LLInt C Loop.  I'll file another bug and take care of that.

What is the issue?  On JIT builds, m_jsStackLimit and m_stackLimit are identical because they are in a union (by design).  On C loop LLINT, they are distinct fields in a struct by design because the JS stack is not on the C stack, and JIT code is not executed.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list