Changeset 91035 in webkit


Ignore:
Timestamp:
Jul 14, 2011 4:38:15 PM (13 years ago)
Author:
scheib@chromium.org
Message:

DFG JIT crashes on host constructor calls in debug mode.
​https://bugs.webkit.org/show_bug.cgi?id=64562

Patch by Filip Pizlo <​fpizlo@apple.com> on 2011-07-14
Reviewed by Gavin Barraclough.

This bug snuck past our tests, so this patchs adds a test to cover this
case.

  • fast/js/array-constructor-host-call-expected.txt: Added.
  • fast/js/array-constructor-host-call.html: Added.
  • fast/js/script-tests/array-constructor-host-call.js: Added.

(constructArray):

Location:
trunk/LayoutTests
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r91034 r91035  
    1313        * fast/js/script-tests/array-constructor-host-call.js: Added.
    1414        (constructArray):
     15
     162011-07-14  Vincent Scheib  <scheib@chromium.org>
     17
     18        [chromium] updated test expectations.
     19
     20        * platform/chromium/test_expectations.txt:
    1521
    16222011-07-14  Vincent Scheib  <scheib@chromium.org>

  • trunk/LayoutTests/platform/chromium/test_expectations.txt

    r91032 r91035  
    646646
    647647BUGWK62309 WIN DEBUG : inspector/styles/styles-disable-then-change.html = PASS TIMEOUT
    648 BUGWK62309 WIN : inspector/styles/styles-iframe.html = PASS TEXT
     648BUGWK62309 DEBUG SLOW : inspector/styles/styles-iframe.html = PASS
    649649BUGWK62309 WIN : inspector/styles/parse-utf8-bom.html = PASS TEXT
    650650BUGWK62309 WIN : inspector/styles/styles-source-lines.html = PASS TEXT
Note: See TracChangeset for help on using the changeset viewer.