From 5741caf9b2e12e941b6d1a8545a61eaed1bb1c43 Mon Sep 17 00:00:00 2001 From: win7-7 Date: Sat, 27 Dec 2025 08:08:45 +0200 Subject: [PATCH] 1370922 - [Ion] Handle allocation failure when generating Math.min. 1370922 - [Ion] Handle allocation failure when generating Math.min. --- js/src/jit/MCallOptimize.cpp | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/js/src/jit/MCallOptimize.cpp b/js/src/jit/MCallOptimize.cpp index 0f2759610d..f07e69f4c8 100644 --- a/js/src/jit/MCallOptimize.cpp +++ b/js/src/jit/MCallOptimize.cpp @@ -1312,7 +1312,9 @@ IonBuilder::inlineMathMinMax(CallInfo& callInfo, bool max) current->add(last); for (unsigned i = 2; i < cases.length(); i++) { - MMinMax* ins = MMinMax::New(alloc(), last, cases[i], returnType, max); + MMinMax* ins = MMinMax::New(alloc().fallible(), last, cases[i], returnType, max); + if (!ins) + return abort(AbortReason::Alloc); current->add(ins); last = ins; }