Changeset 51672 in webkit for trunk/JavaScriptCore/interpreter/CachedCall.h

Timestamp:

Dec 3, 2009, 6:17:46 PM (15 years ago)

Author:

[email protected]

Message:

REGRESSION(4.0.3-48777): Crash in JSC::ExecState::propertyNames() (Debug-only?)
​https://bugs.webkit.org/show_bug.cgi?id=32133

Reviewed by Gavin Barraclough.

Work around odd GCC-ism and correct the scopechain for use by
calls made while a cachedcall is active on the callstack.

File:

• trunk/JavaScriptCore/interpreter/CachedCall.h (modified) (1 diff)

trunk/JavaScriptCore/interpreter/CachedCall.h

@@ -53 +53 @@
         void setThis(JSValue v) { m_closure.setArgument(0, v); }
         void setArgument(int n, JSValue v) { m_closure.setArgument(n + 1, v); }
-        CallFrame* newCallFrame() { return m_closure.newCallFrame; }
+
+        CallFrame* newCallFrame(ExecState* exec)
+        {
+            CallFrame* callFrame = m_closure.newCallFrame;
+            callFrame->setScopeChain(exec->scopeChain());
+            return callFrame;
+        }
+
         ~CachedCall()
         {