DescriptionThe optimizer was propagating an isFn bit improperly when folding expressions
which caused (0, a.b)() to simplify to (a.b()) which leaks (a.b) as the "this"
value for the call.
There was another problem in folding which caused an infinite loop on the test
cases added to JsOptimizerTest. That was fixed in Operation.fold.
Submitted at r5713
Patch Set 1 #Patch Set 2 : Fix optimization of function calls to not leak this. #Patch Set 3 : Fix optimization of function calls to not leak this. #Patch Set 4 : Fix optimization of function calls to not leak this. #
Total comments: 2
Patch Set 5 : Fix optimization of function calls to not leak this. #
MessagesTotal messages: 10
|