commit c55314a443e2fba67e02204f7ad57d4875a786c8
author oliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 30 19:45:20 2012 +0000
committer oliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 30 19:45:20 2012 +0000
tree 86efe90b236bf3d098b7890ce536e4dee9331b49
parent 7914ff625590d46642a760f4cb171ba7c55246c1

DFG does not correctly handle exceptions caught in the LLInt
https://bugs.webkit.org/show_bug.cgi?id=87885

Reviewed by Filip Pizlo.

Source/JavaScriptCore:

Make the DFG use genericThrow, rather than reimplementing a small portion of it.
Also make the LLInt slow paths validate that their PC is correct.

* dfg/DFGOperations.cpp:
* llint/LLIntSlowPaths.cpp:
(LLInt):

LayoutTests:

Pile of code to convince the DFG to throw an exception that ends up being caught
in the LLInt

* fast/js/exception-propagate-from-dfg-to-llint-expected.txt: Added.
* fast/js/exception-propagate-from-dfg-to-llint.html: Added.
* fast/js/script-tests/exception-propagate-from-dfg-to-llint.js: Added.
(o.toString):
(h):
(g):
(f1):
(f2):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@118956 268f45cc-cd09-0410-ab3c-d52691b4dbfc