Closed Bug 582423 Opened 14 years ago Closed 14 years ago

JM: jsreftest failure on js1_5\extensions\regress-336409-2.js

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: dmandelin, Assigned: dmandelin)

References

Details

I think we're just using the wrong shift instruction in the string length stub--the value from the JSString has to be shifted right by 4, and we get a negative length if the actual string length is 0x10000000 (signified by a value of 0x80000003 inside the string).
one-char fix:

http://hg.mozilla.org/projects/jaegermonkey/rev/310942ed8c8b
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.