Closed
Bug 771723
Opened 12 years ago
Closed 12 years ago
IonMonkey: defineReturn() ignores error return of fallible function call.
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: efaust, Unassigned)
Details
defineReturn() in Lowering-shared-inl.h calls defineBox(), which can fail, without checking the return value or propagating the error.
Reporter | ||
Comment 1•12 years ago
|
||
https://hg.mozilla.org/projects/ionmonkey/rev/749524f1d326
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•