Closed Bug 489644 Opened 11 years ago Closed 11 years ago
_BINDNAME wrongful abort due to fp->fun instead of fp->callee usage
Testcase fodder attached, needs jitstats monitoring or TRACEMONKEY=verbose grep -i abort to detect the failure. /be
Cloned function objects happen in chrome, possibly in content for top-level functions (need to check XBL widget bindings). Also of course for closures, but then there'd be an upvar and either the global wouldn't matter, or we'd abort reaching up above the recorder's entry frame. But we rely on the global also for trust labeling, so this is not a trivial bug. /be
Assignee: jim → gal
Attachment #374120 - Flags: review?(brendan)
No need to hold b4 for this according to brendan but final. I think we can get this into b4 though.
Priority: -- → P2
Attachment #374120 - Flags: review?(brendan) → review+
Stupid last-minute changes. Thanks, Andreas.
This should block final.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Marking verified fixed on trunk and 1.9.1 based on check-ins and no backout so far.
Bug in removed tracer code, setting in-testsuite- flag.
You need to log in before you can comment on or make changes to this bug.