ChangeLog

2014-08-29  Akos Kiss  <akiss@inf.u-szeged.hu>

        Ensure that the call frame passed from doVMEntry to the called function always contains the valid scope chain.

        https://bugs.webkit.org/show_bug.cgi?id=136391

        Reviewed by NOBODY (OOPS!).

        Do not rely on calling conventions to fill in the CallerFrame component

        of the ExecState* parameter of the called function.

        * llint/LowLevelInterpreter32_64.asm:

        * llint/LowLevelInterpreter64.asm:

2014-08-29  Joseph Pecoraro  <pecoraro@apple.com>

        JavaScriptCore: Use ASCIILiteral where possible

Source/JavaScriptCore/llint/LowLevelInterpreter32_64.asm

@@end

macro makeHostFunctionCall(entry, temp1, temp2)

    move entry, temp1

370 storep cfr, [sp]

370371 if C_LOOP

371372 move sp, a0

372 storep cfr, [sp]

        storep lr, PtrSize[sp]

        cloopCallNative temp1

    else

@@macro makeHostFunctionCall(entry, temp1, temp2)

            # Put callee frame pointer on stack as arg0, also put it in ecx for "fastcall" targets

            move 0, temp2

            move temp2, 4[sp] # put 0 in ReturnPC

380 move cfr, [sp] # put caller frame pointer into callee frame since callee prologue can't

            move sp, t2 # t2 is ecx

            push temp2 # Push dummy arg1

            push t2

Source/JavaScriptCore/llint/LowLevelInterpreter64.asm

@@macro makeHostFunctionCall(entry, temp)

    elsif ARM64 or C_LOOP

        move sp, a0

    end

314 storep cfr, [sp]

314315 if C_LOOP

315 storep cfr, [sp]

        storep lr, 8[sp]

        cloopCallNative temp

    elsif X86_64_WIN

        # For a host function call, JIT relies on that the CallerFrame (frame pointer) is put on the stack,

        # On Win64 we need to manually copy the frame pointer to the stack, since MSVC may not maintain a frame pointer on 64-bit.

        # See http://msdn.microsoft.com/en-us/library/9z1stfyw.aspx where it's stated that rbp MAY be used as a frame pointer.

        storep cfr, [sp]

        # We need to allocate 32 bytes on the stack for the shadow space.

        subp 32, sp

        call temp