Bug 472440: JS tracing crash, typo in record_JSOP_CALL_GVAR, r=mrbkap
authorDavid Mandelin <dmandelin@mozilla.com>
Wed, 14 Jan 2009 11:42:35 -0800
changeset 23731 4025f66494fdedb1a5dbb2971ae3c2873877ea5f
parent 23730 a6c2b674060795b56a783cfd4f3a7fc229f3662a
child 23732 eb55b787c6dbd6f337b9acaceab383ed7d09e077
push id4690
push userrsayre@mozilla.com
push dateThu, 15 Jan 2009 07:42:55 +0000
treeherdermozilla-central@ddfa483fea2a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersmrbkap
bugs472440
milestone1.9.2a1pre
Bug 472440: JS tracing crash, typo in record_JSOP_CALL_GVAR, r=mrbkap
js/src/jstracer.cpp
--- a/js/src/jstracer.cpp
+++ b/js/src/jstracer.cpp
@@ -8480,17 +8480,17 @@ TraceRecorder::record_JSOP_CALLGVAR()
     if (JSVAL_IS_NULL(slotval))
         return true; // We will see JSOP_CALLNAME from the interpreter's jump, so no-op here.
 
     uint32 slot = JSVAL_TO_INT(slotval);
 
     if (!lazilyImportGlobalSlot(slot))
          ABORT_TRACE("lazy import of global slot failed");
 
-    jsval& v = STOBJ_GET_SLOT(cx->fp->scopeChain, slot);
+    jsval& v = STOBJ_GET_SLOT(globalObj, slot);
     stack(0, get(&v));
     stack(1, INS_CONSTPTR(NULL));
     return true;
 }
 
 JS_REQUIRES_STACK bool
 TraceRecorder::record_JSOP_CALLLOCAL()
 {