656096 - TI+JM: Kraken crypto regression

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Jan de Mooij [:jandem]]

Attachment: Testcase

Attachment is reduced from Kraken crypto-aes and crypto-ccm. It should print:
OK
test.js:19: TypeError: d is undefined

With -n -m -a it prints nothing.

Comment 1

[Christian Holler (:decoder)]

Attachment: Reduced testcase

Comment 2

[Brian Hackett [Laid off!]]

While analyzing a loop body's modset we could incorrectly mark the compilation as having failed without throwing an exception, which would bubble up to TryCompile and cause the interpreter to just exit, also without reporting an exception.  This adds an assertion to the compiler that if it produces an error there is a pending exception, and also fixes the loop body analysis to be infallible (it can allocate, but only into vectors with a CompilerAllocPolicy).

http://hg.mozilla.org/projects/jaegermonkey/rev/71e561e48de4