RESOLVED DUPLICATE of bug 117602 117749
Inline call frames fail to initialize unmodified argument slot correctly
https://bugs.webkit.org/show_bug.cgi?id=117749
Summary Inline call frames fail to initialize unmodified argument slot correctly
Oliver Hunt
Reported 2013-06-18 12:39:24 PDT
function g() { f(i) } function f() { arguments; doStuff(); } function doStuff() { throw f.arguments; } var h; for (var i = 0; i < 100; i++) { try { g() } catch (e) { if (!h) h = e; } } print(h[0]); or function g() { f(i) } function f() { arguments; doStuff(); } function doStuff() { throw f.arguments; } var h; for (var i = 0; i < 100; i++) { try { g() } catch (e) { if (i == 90) h = e; } } print(h[0]);
Attachments
Oliver Hunt
Comment 1 2013-06-18 12:40:41 PDT
Filip Pizlo
Comment 2 2013-06-18 15:43:29 PDT
Is this just a dupe of https://bugs.webkit.org/show_bug.cgi?id=117602? Isn't the problem that op_throw in the DFG ByteCodeParser doesn't flush captured variables correctly?
Oliver Hunt
Comment 3 2013-06-18 16:09:15 PDT
(In reply to comment #2) > Is this just a dupe of https://bugs.webkit.org/show_bug.cgi?id=117602? > > Isn't the problem that op_throw in the DFG ByteCodeParser doesn't flush captured variables correctly? Yeah I think so, i filed while i was originally trying to work out what was going wrong. *** This bug has been marked as a duplicate of bug 117602 ***
Note You need to log in before you can comment on or make changes to this bug.