From f5fa6cfea7dbd02dd690ac030157c4c94ba7ce63 Mon Sep 17 00:00:00 2001
From: Gaming4JC <g4jc@hyperbola.info>
Date: Tue, 3 Dec 2019 20:00:57 -0500
Subject: Bug 1344753 - Update for-of stack depth in
ControlFlowGenerator::processWhileOrForInLoop.
Tag #1287
---
js/src/jit/IonBuilder.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'js/src')
diff --git a/js/src/jit/IonBuilder.cpp b/js/src/jit/IonBuilder.cpp
index 0c69729a4..af4ca0657 100644
--- a/js/src/jit/IonBuilder.cpp
+++ b/js/src/jit/IonBuilder.cpp
@@ -3351,7 +3351,7 @@ IonBuilder::whileOrForInLoop(jssrcnote* sn)
unsigned stackPhiCount;
if (SN_TYPE(sn) == SRC_FOR_OF)
- stackPhiCount = 2;
+ stackPhiCount = 3;
else if (SN_TYPE(sn) == SRC_FOR_IN)
stackPhiCount = 1;
else
--
cgit v1.2.3