Bug 1188586 - Temporarily disable recovery of MPow to unblock fuzzers. (rs=jandem)
authorEric Faust <efaustbmo@gmail.com>
Thu, 13 Aug 2015 14:15:25 -0700
changeset 257731 26b37ffc80f3c6b263990803364762f3b8a35de5
parent 257730 315e8590079c0be25ee7f649e1cb75b6d36d71fa
child 257732 47e0a4c1d10980f7a61ce25341134a8716d418d3
push id29226
push userryanvm@gmail.com
push dateFri, 14 Aug 2015 13:01:14 +0000
treeherdermozilla-central@1b2402247429 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersjandem
bugs1188586
milestone43.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1188586 - Temporarily disable recovery of MPow to unblock fuzzers. (rs=jandem)
js/src/jit/MIR.h
--- a/js/src/jit/MIR.h
+++ b/js/src/jit/MIR.h
@@ -5944,17 +5944,18 @@ class MPow
     AliasSet getAliasSet() const override {
         return AliasSet::None();
     }
     bool possiblyCalls() const override {
         return true;
     }
     bool writeRecoverData(CompactBufferWriter& writer) const override;
     bool canRecoverOnBailout() const override {
-        return true;
+        // Temporarily disable recovery to relieve fuzzer pressure. See bug 1188586.
+        return false;
     }
 
     ALLOW_CLONE(MPow)
 };
 
 // Inline implementation of Math.pow(x, 0.5), which subtly differs from Math.sqrt(x).
 class MPowHalf
   : public MUnaryInstruction,