Open Bug 781023 Opened 12 years ago Updated 2 years ago

IonMonkey: (ARM) ma_b(void*, …) does not register its target as a pending jump.

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect

Tracking

()

People

(Reporter: nbp, Unassigned)

References

Details

(Whiteboard: [ion:p1:fx18]) 

This bug affect CodeGeneratorARM::bailoutIf when assignBailoutId(snapshot) is true.  I am not sure if this imply that a bailout would not work if a pool is added.

This is a blocker for Bug 775167 because we need branch non-frequently to an IonCode*.
Assignee: general → nobody
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.