haikuwebkit/LayoutTests/js/regress-150220.html

11 lines
252 B
HTML
Raw Permalink Normal View History

REGRESSION (r190289): Repro crash clicking back button on netflix.com https://bugs.webkit.org/show_bug.cgi?id=150220 Reviewed by Geoffrey Garen. Source/JavaScriptCore: Since constructors check for a valid new "this" object and return it, we can't make a tail call to another function from within a constructor. Re-enabled the tail calls and the related tail call tests. Did some other miscellaneous clean up in the tail call code as part of the debugging. * bytecompiler/BytecodeGenerator.cpp: (JSC::BytecodeGenerator::BytecodeGenerator): * ftl/FTLLowerDFGToLLVM.cpp: (JSC::FTL::DFG::LowerDFGToLLVM::callPreflight): * interpreter/Interpreter.h: (JSC::calleeFrameForVarargs): * runtime/Options.h: * tests/es6.yaml: * tests/stress/dfg-tail-calls.js: (nonInlinedTailCall.callee): * tests/stress/mutual-tail-call-no-stack-overflow.js: (shouldThrow): * tests/stress/tail-call-in-inline-cache.js: (tail): * tests/stress/tail-call-no-stack-overflow.js: (shouldThrow): * tests/stress/tail-call-recognize.js: (callerMustBeRun): * tests/stress/tail-call-varargs-no-stack-overflow.js: (shouldThrow): LayoutTests: Added a new regression test. Changed the expected output of caller-property to correspond with tail calls enabled. * js/caller-property-expected.txt: * js/regress-150220-expected.tx: Added. * js/regress-150220.html: Added. * js/script-tests/regress-150220.js: Added. (Obj): (SubObj): Canonical link: https://commits.webkit.org/168352@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@191175 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2015-10-16 14:43:02 +00:00
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script src="../resources/js-test-pre.js"></script>
</head>
<body>
<script src="script-tests/regress-150220.js"></script>
<script src="../resources/js-test-post.js"></script>
</body>
</html>