Closed Bug 976054 Opened 10 years ago Closed 10 years ago

16-bit limit on JSScript::nslots_

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla30

People

(Reporter: wingo, Assigned: luke)

Details

Attachments

(1 file)

It seems that script->nslots_ is getting xdr'd as a 16-bit integer; see .  This doesn't seem right.  Assigning to luke as he worked in this area recently.

http://mxr.mozilla.org/mozilla-central/source/js/src/jsscript.cpp#580
Attached patch fix-xdr-nslotsSplinter Review
Good catch!
Attachment #8380727 - Flags: review?(wingo)
Attachment #8380727 - Flags: review?(wingo) → review+
https://hg.mozilla.org/mozilla-central/rev/758fef09a727
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla30
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: