[Webkit-unassigned] [Bug 136436] REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=136436





--- Comment #14 from Geoffrey Garen <ggaren at apple.com>  2014-09-03 11:48:00 PST ---
(From update of attachment 237526)
View in context: https://bugs.webkit.org/attachment.cgi?id=237526&action=review

> Source/JavaScriptCore/jit/JITCall32_64.cpp:227
> +#if NUMBER_OF_ARGUMENT_REGISTERS < 4
> +    // Add stack space for arguments for architectures that pass most / all args on the stack
> +    int32_t addedStackSpace = (sizeof(GPRReg) * 4 + stackAlignmentBytes() - 1) & ~(stackAlignmentBytes() - 1);
> +    addPtr(TrustedImm32(-addedStackSpace), stackPointerRegister);

Who actually writes these four GPRs to the stack? Why isn't that function responsible for making room on the stack?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.