Closed Bug 1617848 Opened 4 years ago Closed 4 years ago

Assert ObjectGroup addendum is tenured

Categories

(Core :: JavaScript Engine, task, P2)

task

Tracking

()

RESOLVED FIXED
mozilla75
Tracking Status
firefox75 --- fixed

People

(Reporter: anba, Assigned: anba)

Details

Attachments

(1 file)

For bug 1557765, comment 13, I've added a call to JSFunction::setTypeForScriptedFunction() in CloneFunctionReuseScript(), but got nonsense results in Ion. Turns out that the ObjectGroup addendum needs to be tenured, but we don't assert this anywhere.

Uses a reinterpret_cast so we don't need to include JSFunction.h in this
header.

Priority: -- → P2
Pushed by ccoroiu@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/0bdab219dd74
Assert ObjectGroup addendum is tenured. r=jandem
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla75
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: