Changeset 153612 in webkit for trunk/Source/JavaScriptCore/jit/JITExceptions.h

Timestamp:

Aug 1, 2013, 2:57:38 PM (12 years ago)

Author:

[email protected]

Message:

REGRESSION: Crash beneath cti_vm_throw_slowpath due to invalid CallFrame pointer
​https://bugs.webkit.org/show_bug.cgi?id=119140

Reviewed by Filip Pizlo.

Ensure that ExceptionHandler is returned by functions in two registers by encoding the value as a 64 bit int.

• jit/JITExceptions.cpp:

(JSC::encode):

• jit/JITExceptions.h:
• jit/JITStubs.cpp:

(JSC::cti_vm_throw_slowpath):

• jit/JITStubs.h:

File:

• trunk/Source/JavaScriptCore/jit/JITExceptions.h (modified) (1 diff)

trunk/Source/JavaScriptCore/jit/JITExceptions.h

@@ -45 +45 @@
 };
 
+// EncodedExceptionHandler is used to convince the compiler to return an ExceptionHander
+// struct in two registers for 32 bit builds.
+typedef int64_t EncodedExceptionHandler;
+
+union ExceptionHandlerUnion {
+    ExceptionHandler handler;
+    EncodedExceptionHandler encodedHandler;
+};
+
+EncodedExceptionHandler encode(ExceptionHandler);
+
 ExceptionHandler genericThrow(VM*, ExecState*, JSValue exceptionValue, unsigned vPCIndex);