New issue
Advanced search Search tips

Issue 665793 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Dec 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 1
Type: Bug

Blocking:
issue 661577



Sign in to add a comment

[crankshaft] OOB string access returns wrong value

Project Member Reported by machenb...@chromium.org, Nov 16 2016

Issue description

# Minimized program:
function foo() {
  return 'x'[1];
}
print(foo());
%OptimizeFunctionOnNextCall(foo);
print(foo());


# Compared fullcode with default

# Flags of fullcode:
--abort_on_stack_overflow --expose-gc --allow-natives-syntax --invoke-weak-callbacks --omit-quit --es-staging  --random-seed 1683665217 --nocrankshaft --turbo-filter=~
# Flags of default:
--abort_on_stack_overflow --expose-gc --allow-natives-syntax --invoke-weak-callbacks --omit-quit --es-staging  --random-seed 1683665217

Difference:
- undefined
+ 

### Start of configuration fullcode:
undefined
undefined

### End of configuration fullcode

### Start of configuration default:
undefined


### End of configuration default
 
Cc: ishell@chromium.org mvstan...@chromium.org verwa...@chromium.org
Components: Blink>JavaScript>Compiler
Labels: Arch-All OS-All
Status: Available (was: Untriaged)
Summary: [crankshaft] OOB string access returns wrong value (was: Difference between fullcode and default: String access beyond length)
Labels: v8-foozzie-failure

Comment 3 by ishell@chromium.org, Dec 19 2016

Owner: ishell@chromium.org
Status: Assigned (was: Available)

Comment 5 by ishell@chromium.org, Dec 20 2016

Status: Fixed (was: Assigned)

Sign in to add a comment