Changeset 252767 in webkit for trunk/Source/JavaScriptCore/tools

Timestamp:

Nov 22, 2019, 3:32:43 AM (6 years ago)

Author:

[email protected]

Message:

Fix missing exception check in replaceUsingStringSearch().
​https://bugs.webkit.org/show_bug.cgi?id=204496

Reviewed by Yusuke Suzuki.

The CachedCall constructor can throw OutOfMemory or StackOverflow errors.
This was caught by existing JSC stress tests when we run with a debug build.

Also placate the exception check validator in $vm's functionCallWithStackSize().

• runtime/StringPrototype.cpp:

(JSC::replaceUsingStringSearch):

• tools/JSDollarVM.cpp:

(JSC::functionCallWithStackSize):

File:

• trunk/Source/JavaScriptCore/tools/JSDollarVM.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/tools/JSDollarVM.cpp

@@ -2103 +2103 @@
     RELEASE_ASSERT(vm.stackLimit() == originalVMStackLimit);
 
+    throwScope.release();
     return encodedJSUndefined();