Revision: 3451
Author: [email protected]
Date: Thu Dec 10 10:33:34 2009
Log: - Ensure the stack trace limit is not negative.
- Enable fuzzing of the CollectStackTrace runtime call.

Review URL: http://codereview.chromium.org/491005
http://code.google.com/p/v8/source/detail?r=3451

Modified:
  /branches/bleeding_edge/src/runtime.cc
  /branches/bleeding_edge/test/mjsunit/fuzz-natives.js

=======================================
--- /branches/bleeding_edge/src/runtime.cc      Wed Dec  9 05:06:08 2009
+++ /branches/bleeding_edge/src/runtime.cc      Thu Dec 10 10:33:34 2009
@@ -7884,7 +7884,8 @@

    HandleScope scope;

-  int initial_size = limit < 10 ? limit : 10;
+  limit = Max(limit, 0);  // Ensure that limit is not negative.
+  int initial_size = Min(limit, 10);
    Handle<JSArray> result = Factory::NewJSArray(initial_size * 3);

    StackFrameIterator iter;
=======================================
--- /branches/bleeding_edge/test/mjsunit/fuzz-natives.js        Wed Nov  4  
00:51:48 2009
+++ /branches/bleeding_edge/test/mjsunit/fuzz-natives.js        Thu Dec 10  
10:33:34 2009
@@ -129,7 +129,6 @@
    "Log": true,
    "DeclareGlobals": true,

-  "CollectStackTrace": true,
    "PromoteScheduledException": true,
    "DeleteHandleScopeExtensions": true
  };

-- 
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to