[Webkit-unassigned] [Bug 143104] REGRESSION: js/regress/inline-arguments-local-escape.html is flaky

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Mar 30 08:57:56 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=143104

--- Comment #5 from Filip Pizlo <fpizlo at apple.com> ---
Same bug, involving ForwardVarargs:

function foo() {
    return arguments;
}

function baz(a, b, c) {
    return a + b + c;
}

function bar(a, b, c) {
    var args = foo(b, c, 42);
    return baz.apply(void 0, args);
}

noInline(bar);

for (var i = 0; i < 10000; ++i) {
    var result = bar(1, 2, 3);
    if (result != 47)
        throw "Error: bad result: " + result;
}

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150330/e286f22c/attachment-0002.html>


More information about the webkit-unassigned mailing list