Closed Bug 582423 Opened 14 years ago Closed 14 years ago

JM: jsreftest failure on js1_5\extensions\regress-336409-2.js

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: dmandelin, Assigned: dmandelin)

References

Details

I think we're just using the wrong shift instruction in the string length stub--the value from the JSString has to be shifted right by 4, and we get a negative length if the actual string length is 0x10000000 (signified by a value of 0x80000003 inside the string).
one-char fix: http://hg.mozilla.org/projects/jaegermonkey/rev/310942ed8c8b
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.