Last Comment Bug 732942 - IonMonkey: ArgumentsRectifier susceptible to infinite loops on arm
: IonMonkey: ArgumentsRectifier susceptible to infinite loops on arm
Status: RESOLVED FIXED
:
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: unspecified
: ARM Linux
: -- normal (vote)
: ---
Assigned To: general
:
Mentors:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-03-05 06:18 PST by Marty Rosenberg [:mjrosenb]
Modified: 2012-03-16 16:21 PDT (History)
1 user (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments
/home/mrosenberg/patches/fix_rectifier-r0.patch (1.54 KB, patch)
2012-03-05 06:18 PST, Marty Rosenberg [:mjrosenb]
jdemooij: review+
Details | Diff | Splinter Review

Description Marty Rosenberg [:mjrosenb] 2012-03-05 06:18:30 PST
Created attachment 602869 [details] [diff] [review]
/home/mrosenberg/patches/fix_rectifier-r0.patch

I'd tried to use a sub instruction to break from a loop, but I forgot the default is to not set condition codes, so whoops.
Comment 1 Marty Rosenberg [:mjrosenb] 2012-03-16 16:21:34 PDT
landed: http://hg.mozilla.org/projects/ionmonkey/rev/863a496c7cb8

Note You need to log in before you can comment on or make changes to this bug.