When an exception is thrown due to stack exhaustion during the call out to slow_path_call_arityCheck(), the exception unwind should start with the caller.
Created attachment 214966 [details]
Comment on attachment 214966 [details]
Is it possible to make a test that hits this path?
(In reply to comment #2)
> (From update of attachment 214966 [details])
> Is it possible to make a test that hits this path?
I found it because LayoutTests/js/script-tests/function-apply-aliased.js was hitting it in 32 bit while testing the other changes.
The crash I was getting was in unwindCallFrame() wanting to tear off an activation based on the contents of the activation register which hadn't been initialized. A reliable test would need to scribble right at the end of the stack, back up and then cause a stack overflow exception during arity check.
Committed r157875: <http://trac.webkit.org/changeset/157875>