Changeset 34069 in webkit for trunk/JavaScriptCore/VM/RegisterFile.h

Timestamp:

May 23, 2008, 2:38:30 AM (17 years ago)

Author:

[email protected]

Message:

Fix <rdar://problem/5954997> global-recursion-on-full-stack.html crashes under guardmalloc.

Growing the register file with uncheckedGrow from within Machine::execute is not safe as the
register file may be too close to its maximum size to grow successfully. By using grow,
checking the result and throwing a stack overflow error we can avoid crashing.

Reviewed by Oliver Hunt.

• VM/Machine.cpp:

(KJS::Machine::execute):

• VM/RegisterFile.h: Remove the now-unused uncheckedGrow.

File:

• trunk/JavaScriptCore/VM/RegisterFile.h (modified) (1 diff)

trunk/JavaScriptCore/VM/RegisterFile.h

@@ -125 +125 @@
             return true;
         }
-        
-        void uncheckedGrow(size_t size)
-        {
-            if (size > m_size) {
-                if (size > m_capacity)
-                    growBuffer(size, std::numeric_limits<size_t>::max());
-
-                m_size = size;
-            }       
-        }
 
         size_t size() { return m_size; }