Changeset 153612 in webkit for trunk/Source/JavaScriptCore/jit/JITExceptions.cpp

Timestamp:

Aug 1, 2013, 2:57:38 PM (12 years ago)

Author:

[email protected]

Message:

REGRESSION: Crash beneath cti_vm_throw_slowpath due to invalid CallFrame pointer
​https://bugs.webkit.org/show_bug.cgi?id=119140

Reviewed by Filip Pizlo.

Ensure that ExceptionHandler is returned by functions in two registers by encoding the value as a 64 bit int.

• jit/JITExceptions.cpp:

(JSC::encode):

• jit/JITExceptions.h:
• jit/JITStubs.cpp:

(JSC::cti_vm_throw_slowpath):

• jit/JITStubs.h:

File:

• trunk/Source/JavaScriptCore/jit/JITExceptions.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/jit/JITExceptions.cpp

@@ -52 +52 @@
 }
 
+EncodedExceptionHandler encode(ExceptionHandler handler)
+{
+    ExceptionHandlerUnion u;
+    u.handler = handler;
+    return u.encodedHandler;
+}
+
 ExceptionHandler genericThrow(VM* vm, ExecState* callFrame, JSValue exceptionValue, unsigned vPCIndex)
 {