[Webkit-unassigned] [Bug 199295] Memory corruption when creating JSGlobalContext

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 17 07:19:10 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=199295

--- Comment #10 from Carlos Garcia Campos <cgarcia at igalia.com> ---
I don't know much about asm, but if I understand the code correctly, it zeroes the stack from VM::m_lastStackTop to sp. It shouldn't change the m_lastStackTop, right? for some reason it's changing it, sometimes with values outside the stack bounds, which is what causes the valgrind errors.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190917/1996065e/attachment-0001.html>


More information about the webkit-unassigned mailing list