Closed Bug 862932 Opened 7 years ago Closed 7 years ago

Parallel JS: inlineUnsafeSetTypedArrayElement is busted

Categories

(Core :: JavaScript Engine, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
mozilla23

People

(Reporter: pnkfelix, Assigned: pnkfelix)

References

Details

Attachments

(1 file)

The index calculations for `arri`, `idxi`, `elemi` are all busted in the code for IonBuilder::inlineUnsafeSetTypedArrayElement.  No one noticed since its dead code that can only be exposed via self-hosted calls to UnsafeSetElement on typed arrays, which we haven't attempted to do since many merges ago.
Blocks: PJS
Assignee: general → pnkfelix
Status: NEW → ASSIGNED
Attachment #738599 - Flags: review?(nmatsakis)
Attachment #738599 - Flags: review?(nmatsakis) → review+
Attachment #738599 - Attachment is patch: true
https://hg.mozilla.org/mozilla-central/rev/5a12236dba85
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla23
You need to log in before you can comment on or make changes to this bug.