ctiVMThrowTrampolineSlowpath is not defined for the Win64 build of JavaScriptCore. Michael's fix is based on assembly from JITStubsX86_64.h that should be in JITStubsMSVC64.asm.
Created attachment 208375 [details] Patch
Comment on attachment 208375 [details] Patch Something is wrong with the calling convention. Something needs to be put on the stack, and I'm not even going to pretend to know exactly how to fix it. I'm going to leave this one to you, Michael.
Created attachment 208753 [details] Patch
Comment on attachment 208753 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=208753&action=review > Source/JavaScriptCore/jit/JITStubsMSVC64.asm:86 > + mov rdi, r13 > + call cti_vm_throw_slowpath > + ; When cti_vm_throw_slowpath returns, rax has callFrame and rdx has handler address > + jmp rdx Remove this dead code.
Created attachment 208754 [details] Patch
Comment on attachment 208754 [details] Patch Clearing flags on attachment: 208754 Committed r154075: <http://trac.webkit.org/changeset/154075>
All reviewed patches have been landed. Closing bug.