Closed
Bug 604638
Opened 15 years ago
Closed 15 years ago
TracerState::TracerState does something strange with bailedSlowNativeRegs
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: timeless, Assigned: luke)
References
(Blocks 1 open bug)
Details
(Keywords: coverity, Whiteboard: fixed-in-tracemonkey)
Attachments
(1 file)
|
1.43 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
6535 JS_ALWAYS_INLINE
6536 TracerState::TracerState(JSContext* cx, TraceMonitor* tm, TreeFragment* f,
6537 uintN& inlineCallCount, VMSideExit** innermostNestedGuardp)
6558 bailedSlowNativeRegs(bailedSlowNativeRegs)
I'm not sure if this is always initialized by something else. If it isn't, this is probably uninitialized data.
|
Assignee | |
Comment 1•15 years ago
|
||
Ah, a straggler that survived bug 581263.
http://hg.mozilla.org/tracemonkey/diff/66c8ad02543b/js/src/jstracer.cpp#l1.57
The self-initialization is indeed weird, but not sensitive.
Group: core-security
|
|
Assignee | |
Comment 2•15 years ago
|
||
|
|
Assignee | |
Updated•15 years ago
|
Attachment #483511 -
Attachment is patch: true
Attachment #483511 -
Attachment mime type: application/octet-stream → text/plain
|
|
||
Updated•15 years ago
|
Attachment #483511 -
Flags: review?(dvander) → review+
|
|
Assignee | |
Comment 3•15 years ago
|
||
Whiteboard: fixed-in-tracemonkey
|
||
Comment 4•15 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
|
||
Updated•7 years ago
|
Blocks: coverity-analysis
You need to log in
before you can comment on or make changes to this bug.
Description
•