Title: [218873] trunk/Source/_javascript_Core
- Revision
- 218873
- Author
- [email protected]
- Date
- 2017-06-28 05:35:05 -0700 (Wed, 28 Jun 2017)
Log Message
Gardening: CLoop build fix.
https://bugs.webkit.org/show_bug.cgi?id=173700
<rdar://problem/32926032>
Not reviewed.
* llint/LLIntSlowPaths.cpp:
(JSC::LLInt::LLINT_SLOW_PATH_DECL):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (218872 => 218873)
--- trunk/Source/_javascript_Core/ChangeLog 2017-06-28 11:23:39 UTC (rev 218872)
+++ trunk/Source/_javascript_Core/ChangeLog 2017-06-28 12:35:05 UTC (rev 218873)
@@ -1,5 +1,16 @@
2017-06-28 Mark Lam <[email protected]>
+ Gardening: CLoop build fix.
+ https://bugs.webkit.org/show_bug.cgi?id=173700
+ <rdar://problem/32926032>
+
+ Not reviewed.
+
+ * llint/LLIntSlowPaths.cpp:
+ (JSC::LLInt::LLINT_SLOW_PATH_DECL):
+
+2017-06-28 Mark Lam <[email protected]>
+
Ensure that computed new stack pointer values do not underflow.
https://bugs.webkit.org/show_bug.cgi?id=173700
<rdar://problem/32926032>
Modified: trunk/Source/_javascript_Core/llint/LLIntSlowPaths.cpp (218872 => 218873)
--- trunk/Source/_javascript_Core/llint/LLIntSlowPaths.cpp 2017-06-28 11:23:39 UTC (rev 218872)
+++ trunk/Source/_javascript_Core/llint/LLIntSlowPaths.cpp 2017-06-28 12:35:05 UTC (rev 218873)
@@ -511,7 +511,7 @@
// throw the StackOverflowError unconditionally.
#if !ENABLE(JIT)
Register* topOfFrame = exec->topOfFrame();
- if (LIKELY(topOfFrame < exec)) {
+ if (LIKELY(topOfFrame < reinterpret_cast<Register*>(exec))) {
ASSERT(!vm.interpreter->cloopStack().containsAddress(topOfFrame));
if (LIKELY(vm.ensureStackCapacityFor(topOfFrame)))
LLINT_RETURN_TWO(pc, 0);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes