diff options
author | wolfbeast <mcwerewolf@wolfbeast.com> | 2019-09-05 13:03:09 +0200 |
---|---|---|
committer | wolfbeast <mcwerewolf@wolfbeast.com> | 2019-09-05 13:19:33 +0200 |
commit | 2b223cce089bb8cbfb1a463fdd42e09eee63c7b2 (patch) | |
tree | e3d2025041a0f3a6d9eb870455ca8db324b88729 /js/src/jit/IonAnalysis.h | |
parent | d90dd7b0c60e7950b668a08d415c0395c92db535 (diff) | |
download | UXP-2b223cce089bb8cbfb1a463fdd42e09eee63c7b2.tar UXP-2b223cce089bb8cbfb1a463fdd42e09eee63c7b2.tar.gz UXP-2b223cce089bb8cbfb1a463fdd42e09eee63c7b2.tar.lz UXP-2b223cce089bb8cbfb1a463fdd42e09eee63c7b2.tar.xz UXP-2b223cce089bb8cbfb1a463fdd42e09eee63c7b2.zip |
Use the correct group for JIT constraints.
This fixes a rare crash/CTD in JS.
This adds information about the constraints to a new RAII class so we
can finish all constraints at the end.
Based on changes in BZ 1568397
Diffstat (limited to 'js/src/jit/IonAnalysis.h')
-rw-r--r-- | js/src/jit/IonAnalysis.h | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/js/src/jit/IonAnalysis.h b/js/src/jit/IonAnalysis.h index efd31415b..49bc0b591 100644 --- a/js/src/jit/IonAnalysis.h +++ b/js/src/jit/IonAnalysis.h @@ -196,8 +196,11 @@ MCompare* ConvertLinearInequality(TempAllocator& alloc, MBasicBlock* block, const LinearSum& sum); MOZ_MUST_USE bool -AnalyzeNewScriptDefiniteProperties(JSContext* cx, HandleFunction fun, - ObjectGroup* group, HandlePlainObject baseobj, +AnalyzeNewScriptDefiniteProperties(JSContext* cx, + DPAConstraintInfo& constraintInfo, + HandleFunction fun, + ObjectGroup* group, + HandlePlainObject baseobj, Vector<TypeNewScript::Initializer>* initializerList); MOZ_MUST_USE bool |