fix JSCore segmentation fault on 64-bit big endian systems
authorDebian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Mon, 25 Apr 2022 11:00:32 +0000 (12:00 +0100)
committerDmitry Shachnev <mitya57@debian.org>
Mon, 25 Apr 2022 11:00:32 +0000 (12:00 +0100)
commitd2a06cca6b4b9e0de9095904a0034b4d65d2224c
treec0379be21cea6c677d2724f72660a8e5c8c84c5b
parentad2f9bf7ccb3bce067bd9f37f8cdcca339f4e165
fix JSCore segmentation fault on 64-bit big endian systems

Origin: backport, https://github.com/webkit/webkit/commit/3fdde71c7d95d758
Reviewed-by: Frank Heimes <frank.heimes@canonical.com>
Last-Update: 2021-11-24

In CodeBlock.cpp the code preparing the operands of op_get_from_scope writes
the property offset as pointer size (hence 64 bit) value:

2141: instructions[i + 6].u.pointer = reinterpret_cast<void*>(op.operand);

while the same slot is accessed later by the jitted code as 32 bit integer:

macro getProperty(slow)
   loadisFromInstruction(6, t1)

This fails on big endian targets since the integer access takes the higher
part of the 64 bit value.

Gbp-Pq: Name jscore_big_endian.diff
Source/JavaScriptCore/llint/LowLevelInterpreter64.asm