-
cwzwarich@webkit.org authored
Reviewed by Oliver. Bug 19716: REGRESSION (SquirrelFish): Reproducible crash after entering a username at mint.com <https://bugs.webkit.org/show_bug.cgi?id=19716> When unwinding callframes for exceptions, check whether the callframe was created by a reentrant native call to JavaScript after tearing off the local variables instead of before. JavaScriptCore: * VM/Machine.cpp: (KJS::Machine::unwindCallFrame): LayoutTests: * fast/js/reentrant-call-unwind-expected.txt: Added. * fast/js/reentrant-call-unwind.html: Added. * fast/js/resources/reentrant-call-unwind.js: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@34751 268f45cc-cd09-0410-ab3c-d52691b4dbfc
a2e0ef7d