RESOLVED FIXED 241727
REGRESSION (251613@main): Missing exception check in JSFunction::put()
https://bugs.webkit.org/show_bug.cgi?id=241727
Summary REGRESSION (251613@main): Missing exception check in JSFunction::put()
Karl Rackler
Reported 2022-06-17 13:44:40 PDT
Description: Multiple JSC and jsc-cloop tests are consistent failures. The first failure build failures are https://build.webkit.org/#/builders/378/builds/1242, https://build.webkit.org/#/builders/378/builds/1242, and https://build.webkit.org/#/builders/433/builds/3848. 251613@main modified JSFunction.cpp so that possibly introduced the consistent failures. jscore-test and webkit-jsc-cloop-test stdio: tress/put-to-proto-chain-overrides-put.js.default: ERROR: Unchecked JS exception: stress/put-to-proto-chain-overrides-put.js.default: This scope can throw a JS exception: reifyLazyBoundNameIfNeeded @ runtime/JSFunction.cpp:675 stress/put-to-proto-chain-overrides-put.js.default: (ExceptionScope::m_recursionDepth was 8) stress/put-to-proto-chain-overrides-put.js.default: But the exception was unchecked as of this scope: putInlineSlow @ runtime/JSObject.cpp:766 stress/put-to-proto-chain-overrides-put.js.default: (ExceptionScope::m_recursionDepth was 8)
Attachments
Radar WebKit Bug Importer
Comment 1 2022-06-17 13:44:59 PDT
Alexey Shvayka
Comment 2 2022-06-18 02:54:19 PDT
EWS
Comment 3 2022-06-18 03:01:21 PDT
Committed r295659 (251664@main): <https://commits.webkit.org/251664@main> Reviewed commits have been landed. Closing PR #1614 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.