[Webkit-unassigned] [Bug 136436] REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 2 15:51:49 PDT 2014


https://bugs.webkit.org/show_bug.cgi?id=136436





--- Comment #12 from Akos Kiss <akiss at inf.u-szeged.hu>  2014-09-02 15:51:53 PST ---
(In reply to comment #10)
> Created an attachment (id=237519)
 --> (https://bugs.webkit.org/attachment.cgi?id=237519&action=review) [details]
> Patch

I was wondering why to subtract sizeof(Register) * 4 from sp, why not sizeof(CallerFrameAndPC)? (And then, the arithmetic is not even necessary, since the result is already in regT1.)

A stack/call frame layout problem also exists on ARM32. It would be worth looking at https://bugs.webkit.org/show_bug.cgi?id=132740 . There, a highly similar approach has been suggested (not reviewed yet / titled dirty hack).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list