WebKit Bugzilla
New
Browse
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
164968
Fix exception scope verification failures in jsc.cpp.
https://bugs.webkit.org/show_bug.cgi?id=164968
Summary
Fix exception scope verification failures in jsc.cpp.
Mark Lam
Reported
2016-11-18 16:23:51 PST
Patch coming.
Attachments
proposed patch.
(6.49 KB, patch)
2016-11-18 16:29 PST
,
Mark Lam
no flags
Details
Formatted Diff
Diff
proposed patch with more fixes.
(8.49 KB, patch)
2016-11-21 08:31 PST
,
Mark Lam
darin
: review+
Details
Formatted Diff
Diff
Updated patch.
(8.38 KB, patch)
2016-11-21 11:03 PST
,
Mark Lam
mark.lam
: review-
Details
Formatted Diff
Diff
proposed patch.
(8.48 KB, patch)
2016-11-24 13:56 PST
,
Mark Lam
saam
: review+
Details
Formatted Diff
Diff
re-based patch for landing.
(7.73 KB, patch)
2017-03-15 14:20 PDT
,
Mark Lam
no flags
Details
Formatted Diff
Diff
re-based patch for landing: w/ build fix for release builds.
(7.75 KB, patch)
2017-03-15 14:55 PDT
,
Mark Lam
no flags
Details
Formatted Diff
Diff
Show Obsolete
(5)
View All
Add attachment
proposed patch, testcase, etc.
Mark Lam
Comment 1
2016-11-18 16:29:19 PST
Created
attachment 295213
[details]
proposed patch.
Mark Lam
Comment 2
2016-11-21 08:31:15 PST
Created
attachment 295294
[details]
proposed patch with more fixes.
Darin Adler
Comment 3
2016-11-21 09:05:06 PST
Comment on
attachment 295294
[details]
proposed patch with more fixes. View in context:
https://bugs.webkit.org/attachment.cgi?id=295294&action=review
> Source/JavaScriptCore/jsc.cpp:385 > + RETURN_IF_EXCEPTION(scope, encodedJSValue());
Too late since we already have so may of these, but I really prefer to use "{ }" in cases like this one rather than "encodedJSValue()".
> Source/JavaScriptCore/jsc.cpp:1443 > + RELEASE_ASSERT(!scope.exception());
I saw the comment about out of memory, but is this really the right thing to do? This is a command line tool, so shouldn't we write something out to stderr and then exit instead of aborting? Seems more elegant to me. In all the places where the code now says RELEASE_ASSERT.
> Source/JavaScriptCore/jsc.cpp:2508 > + RETURN_IF_EXCEPTION(scope, JSValue());
Same thing would work here, using { } instead of JSValue(). In fact, if we made a version of the RETURN_IF_EXCEPTION macro that used { }, we could use it in functions that return JSValue, EncodedJSValue, and any pointer type. We should really do that. The only place we couldn’t use it is in functions that return void, I think.
Mark Lam
Comment 4
2016-11-21 11:02:00 PST
Comment on
attachment 295294
[details]
proposed patch with more fixes. View in context:
https://bugs.webkit.org/attachment.cgi?id=295294&action=review
>> Source/JavaScriptCore/jsc.cpp:1443 >> + RELEASE_ASSERT(!scope.exception()); > > I saw the comment about out of memory, but is this really the right thing to do? This is a command line tool, so shouldn't we write something out to stderr and then exit instead of aborting? Seems more elegant to me. In all the places where the code now says RELEASE_ASSERT.
I'll defer landing this patch until I can do more analysis on this issue, and see if we can do better.
>> Source/JavaScriptCore/jsc.cpp:2508 >> + RETURN_IF_EXCEPTION(scope, JSValue()); > > Same thing would work here, using { } instead of JSValue(). > > In fact, if we made a version of the RETURN_IF_EXCEPTION macro that used { }, we could use it in functions that return JSValue, EncodedJSValue, and any pointer type. We should really do that. The only place we couldn’t use it is in functions that return void, I think.
I'll change these to use { }. We had entertained having different versions of the RETURN_IF_EXCEPTION() macro before for different return types (2 at the time), but opted to go with just 1 macro for consistency. If we go with a special macro for returning { }, then we'll end up with 3 macros: 1 for void, 1 for { }, and 1 for anything else (there are a few places where we need that). I'll stick with the 1 RETURN_IF_EXCEPTION() macro that we have currently for now.
Mark Lam
Comment 5
2016-11-21 11:03:17 PST
Created
attachment 295302
[details]
Updated patch. Still need to look into the use of RELEASE_ASSERTs, and see if we can do better.
Mark Lam
Comment 6
2016-11-24 13:46:11 PST
Comment on
attachment 295302
[details]
Updated patch. It is invalid to replace returning encodedJSValue() with returning { }. On 32-bit builds, the former is non-zero, while the latter is 0. Will fix this patch.
Mark Lam
Comment 7
2016-11-24 13:56:24 PST
Created
attachment 295418
[details]
proposed patch.
Saam Barati
Comment 8
2016-11-28 14:09:36 PST
Comment on
attachment 295418
[details]
proposed patch. View in context:
https://bugs.webkit.org/attachment.cgi?id=295418&action=review
> Source/JavaScriptCore/jsc.cpp:2510 > JSString* type = jsCast<JSString*>(wasmValue.get(exec, makeIdentifier(vm, "type"))); > + RETURN_IF_EXCEPTION(scope, { }); > JSValue value = wasmValue.get(exec, makeIdentifier(vm, "value")); > + RETURN_IF_EXCEPTION(scope, { });
I'd make these assertions since they're for testing WASM
Mark Lam
Comment 9
2017-03-15 14:18:28 PDT
Comment on
attachment 295418
[details]
proposed patch. View in context:
https://bugs.webkit.org/attachment.cgi?id=295418&action=review
>> Source/JavaScriptCore/jsc.cpp:2510 >> + RETURN_IF_EXCEPTION(scope, { }); > > I'd make these assertions since they're for testing WASM
I've applied this change.
> Source/JavaScriptCore/jsc.cpp:2590 > + for (unsigned argIndex = 0; argIndex < arguments->length(); ++argIndex) { > + JSValue boxedValue = box(exec, vm, arguments->getIndexQuickly(argIndex)); > + RETURN_IF_EXCEPTION(scope, encodedJSValue()); > + boxedArgs.append(boxedValue); > + }
Since we've changed box() to never throw but to assert no exceptions instead, this change is now unnecessary.
> Source/JavaScriptCore/jsc.cpp:2594 > + RETURN_IF_EXCEPTION(scope, encodedJSValue());
Ditto. This can be removed too.
Mark Lam
Comment 10
2017-03-15 14:20:20 PDT
Created
attachment 304546
[details]
re-based patch for landing.
Mark Lam
Comment 11
2017-03-15 14:55:15 PDT
Created
attachment 304553
[details]
re-based patch for landing: w/ build fix for release builds.
Mark Lam
Comment 12
2017-03-15 15:50:43 PDT
Thanks for the reviews. Landed in
r214016
: <
http://trac.webkit.org/r214016
>.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug