Changeset 43606 in webkit for trunk/JavaScriptCore/bytecompiler/BytecodeGenerator.cpp

Timestamp:

May 12, 2009, 8:53:32 PM (16 years ago)

Author:

[email protected]

Message:

<rdar://problem/6881457> Crash occurs at JSC::Interpreter::execute() when loading ​http://www.sears.com

Reviewed by Gavin Barraclough

We created the arguments objects before an op_push_scope but not
before op_push_new_scope, this meant a null arguments object could
be resolved inside catch blocks.

File:

• trunk/JavaScriptCore/bytecompiler/BytecodeGenerator.cpp (modified) (1 diff)

trunk/JavaScriptCore/bytecompiler/BytecodeGenerator.cpp

@@ -1845 +1845 @@
     m_dynamicScopeDepth++;
     
+    createArgumentsIfNecessary();
+
     emitOpcode(op_push_new_scope);
     instructions().append(dst->index());