Closed
Bug 538639
Opened 15 years ago
Closed 15 years ago
At the top of a catch block, we generate coerce when an unbox is all that is needed.
Categories
(Tamarin Graveyard :: Baseline JIT (CodegenLIR), defect, P2)
Tamarin Graveyard
Baseline JIT (CodegenLIR)
Tracking
(Not tracked)
RESOLVED
FIXED
Q3 11 - Serrano
People
(Reporter: edwsmith, Assigned: wmaddox)
References
Details
The exception value caught is always represented as Atom, however the catch block is chosen based on the type of the value, so once the catch block is entered, all we need to do is convert Atom to a native representation; a second implicit type check is not required.
See this code in Verifier::verify():
if (pc == code_pos + handler->target)
{
emitCoerce(handler->traits, sp);
}
|
Reporter | |
Updated•15 years ago
|
Severity: normal → enhancement
Target Milestone: --- → Future
|
|
Reporter | |
Updated•15 years ago
|
Assignee: nobody → wmaddox
Severity: enhancement → trivial
Status: NEW → ASSIGNED
Priority: -- → P2
Target Milestone: Future → flash10.2
|
Assignee | |
Comment 1•15 years ago
|
||
Fixed by the fix for:
Bug 565184 - Corrupt ABC can cause execution to fall of the end of JIT-ed method
https://bugzilla.mozilla.org/attachment.cgi?id=448682&action=edit
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
|
|
||
Updated•14 years ago
|
Flags: flashplayer-bug+
You need to log in
before you can comment on or make changes to this bug.
Description
•