AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity
3baa290264
v8/test
History
mstarzinger 3baa290264 [fullcodegen] Fix assert for operand stack depth tracking. 
This fixes a corner case that triggered an assert in full-codegens
operand stack depth tracking. We stop pushing operands if we overflow
the C-stack while iterating the AST. This makes the tracking go out of
sync before we fully returned from the tree traversal, at which point
the thrown RangeError will abort compilation.

R=ishell@chromium.org
TEST=mjsunit/regress/regress-crbug-589472
BUG=chromium:589472
LOG=n

Review URL: https://codereview.chromium.org/1732903002

Cr-Commit-Position: refs/heads/master@{#34255}
2016-02-24 16:29:47 +00:00
..
benchmarks [test] Re-enable typescript that is no longer failing on ia32. 2015-10-26 06:00:35 +00:00
cctest Revert of [Interpreter] Implements calls through CallICStub in the interpreter. (patchset #15 id:270001 of https://codereview.chromium.org/1688283003/ ) 2016-02-24 15:16:19 +00:00
fuzzer Add json fuzzer 2016-02-02 11:29:01 +00:00
intl Intl: Use private symbols to memoize bound functions 2016-02-24 00:05:06 +00:00
js-perf-test Remove always-on --harmony-rest-parameters flag 2015-12-12 00:00:38 +00:00
memory Correctly name memory stat for context snapshot size. 2015-04-10 22:36:02 +00:00
message [parser] unify metaproperty parsing and require unescaped property name 2016-02-16 23:38:09 +00:00
mjsunit [fullcodegen] Fix assert for operand stack depth tracking. 2016-02-24 16:29:47 +00:00
mozilla Ship ES2015 sloppy-mode const semantics 2016-01-11 23:09:59 +00:00
preparser Reland [swarming] Isolate v8 testing. 2015-10-05 09:48:42 +00:00
promises-aplus Remove unnecessary coupling between Promise tests and Object.observe 2015-07-21 17:17:07 +00:00
simdjs Revert "[turbofan] Stage --turbo-inlining behind --turbo flag." and "[turbofan] Skip more tests that fail with --turbo-inlining." 2015-10-20 06:23:02 +00:00
test262 Stage ES2015 iterator finalization 2016-02-24 16:20:53 +00:00
unittests Revert of [Interpreter] Implements calls through CallICStub in the interpreter. (patchset #15 id:270001 of https://codereview.chromium.org/1688283003/ ) 2016-02-24 15:16:19 +00:00
webkit ES2015 web compat workaround: RegExp.prototype.flags => "" 2016-02-23 01:49:03 +00:00
bot_default.gyp Add a library suitable for libfuzzer with a small unit test runner shell 2016-01-26 10:39:03 +00:00
bot_default.isolate Add a library suitable for libfuzzer with a small unit test runner shell 2016-01-26 10:39:03 +00:00
default.gyp Add a library suitable for libfuzzer with a small unit test runner shell 2016-01-26 10:39:03 +00:00
default.isolate Add a library suitable for libfuzzer with a small unit test runner shell 2016-01-26 10:39:03 +00:00
ignition.gyp [test] Add ignition test set. 2016-01-04 17:26:42 +00:00
ignition.isolate [swarming] Roll luci-go/isolate to 5c67f7b670b5. 2016-01-19 17:03:56 +00:00
optimize_for_size.gyp [swarming] Isolate webkit and optimize_for_size. 2015-10-14 17:35:05 +00:00
optimize_for_size.isolate [swarming] Roll luci-go/isolate to 5c67f7b670b5. 2016-01-19 17:03:56 +00:00
perf.gyp [Swarming] Isolate perf tests. 2016-02-15 11:17:18 +00:00
perf.isolate [Swarming] Isolate perf tests. 2016-02-15 11:17:18 +00:00