IonMonkey: defineReturn() ignores error return of fallible function call.

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: efaust, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

5 years ago
defineReturn() in Lowering-shared-inl.h calls defineBox(), which can fail, without checking the return value or propagating the error.
(Reporter)

Comment 1

5 years ago
https://hg.mozilla.org/projects/ionmonkey/rev/749524f1d326
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.