• Caitlin Potter's avatar
    [builtins] abort FrameFunctionIterator::next if frame summary empty · 18dc491c
    Caitlin Potter authored
    Previously, FrameFunctionIterator::next() assumed that the frame summary
    was non-empty. It's now possible for the list not to be empty, if the
    JS microtask pump invokes a builtin function which uses
    FrameFunctionIterator directly. While this is unlikely to show up in
    real world code, it is necessary to handle it to prevent crashes.
    
    BUG=chromium:794744
    R=mstarzinger@chromium.org, cbruni@chromium.org, verwaest@chromium.org
    
    Change-Id: Ie95c2228544f57730d1c6c1ff955b2c94ff1c06b
    Reviewed-on: https://chromium-review.googlesource.com/833266Reviewed-by: 's avatarCamillo Bruni <cbruni@chromium.org>
    Commit-Queue: Caitlin Potter <caitp@igalia.com>
    Cr-Commit-Position: refs/heads/master@{#50221}
    18dc491c
Name
Last commit
Last update
..
regress Loading commit data...
async-arrow-lexical-arguments.js Loading commit data...
async-arrow-lexical-new.target.js Loading commit data...
async-arrow-lexical-super.js Loading commit data...
async-arrow-lexical-this.js Loading commit data...
async-await-basic.js Loading commit data...
async-await-no-constructor.js Loading commit data...
async-await-resolve-new.js Loading commit data...
async-await-species.js Loading commit data...
async-destructuring.js Loading commit data...
async-function-stacktrace.js Loading commit data...
async-function-try-finally.js Loading commit data...
constructor-returning-primitive.js Loading commit data...
object-entries.js Loading commit data...
object-get-own-property-descriptors.js Loading commit data...
object-values.js Loading commit data...
sloppy-no-duplicate-async.js Loading commit data...