Revision: 16358
Author:   [email protected]
Date:     Tue Aug 27 13:31:15 2013 UTC
Log:      Fix Cluster Fuzz stack frame corruption bug.

BUG=
[email protected]

Review URL: https://codereview.chromium.org/23596002
http://code.google.com/p/v8/source/detail?r=16358

Modified:
 /branches/bleeding_edge/src/arm/code-stubs-arm.cc
 /branches/bleeding_edge/src/ia32/code-stubs-ia32.cc
 /branches/bleeding_edge/src/x64/code-stubs-x64.cc

=======================================
--- /branches/bleeding_edge/src/arm/code-stubs-arm.cc Tue Aug 27 11:55:08 2013 UTC +++ /branches/bleeding_edge/src/arm/code-stubs-arm.cc Tue Aug 27 13:31:15 2013 UTC
@@ -4413,6 +4413,7 @@
   {
     FrameScope scope(masm, StackFrame::INTERNAL);

+    __ SmiTag(r0);
     __ push(r0);
     __ push(r1);
     __ push(r2);
@@ -4423,6 +4424,7 @@
     __ pop(r2);
     __ pop(r1);
     __ pop(r0);
+    __ SmiUntag(r0);
   }
   __ b(&done);

=======================================
--- /branches/bleeding_edge/src/ia32/code-stubs-ia32.cc Tue Aug 27 11:55:08 2013 UTC +++ /branches/bleeding_edge/src/ia32/code-stubs-ia32.cc Tue Aug 27 13:31:15 2013 UTC
@@ -4303,6 +4303,7 @@
   {
     FrameScope scope(masm, StackFrame::INTERNAL);

+    __ SmiTag(eax);
     __ push(eax);
     __ push(edi);
     __ push(ebx);
@@ -4313,6 +4314,7 @@
     __ pop(ebx);
     __ pop(edi);
     __ pop(eax);
+    __ SmiUntag(eax);
   }
   __ jmp(&done);

=======================================
--- /branches/bleeding_edge/src/x64/code-stubs-x64.cc Tue Aug 27 11:55:08 2013 UTC +++ /branches/bleeding_edge/src/x64/code-stubs-x64.cc Tue Aug 27 13:31:15 2013 UTC
@@ -3391,6 +3391,7 @@
   {
     FrameScope scope(masm, StackFrame::INTERNAL);

+    __ Integer32ToSmi(rax, rax);
     __ push(rax);
     __ push(rdi);
     __ push(rbx);
@@ -3401,6 +3402,7 @@
     __ pop(rbx);
     __ pop(rdi);
     __ pop(rax);
+    __ SmiToInteger32(rax, rax);
   }
   __ jmp(&done);

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to