tor-browser

commit 36888c1cec9770fbaef277b52a8a01075c20f733
parent 80a41f89940c75ff466396dca504a06ad5e764e3
Author: Rong "Mantle" Bao <webmaster@csmantle.top>
Date:   Thu, 27 Nov 2025 11:57:04 +0000

Bug 1996840 - Part 1: (Drive-by) Append InstSize factor for secondaryVeneers. r=nbp

Differential Revision: https://phabricator.services.mozilla.com/D270942

Diffstat:
M
js/src/jit/shared/IonAssemblerBufferWithConstantPools.h
 | 
6
++++--

1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/js/src/jit/shared/IonAssemblerBufferWithConstantPools.h b/js/src/jit/shared/IonAssemblerBufferWithConstantPools.h
@@ -746,8 +746,10 @@ struct AssemblerBufferWithConstantPools
       // secondary range veneers assuming the worst case deadlines.
 
       // Total pending secondary range veneer size.
-      size_t secondaryVeneers = guardSize_ * (branchDeadlines_.size() -
-                                              branchDeadlines_.maxRangeSize());
+      size_t secondaryVeneers =
+          guardSize_ *
+          (branchDeadlines_.size() - branchDeadlines_.maxRangeSize()) *
+          InstSize;
 
       if (deadline < poolEnd + secondaryVeneers) {
         return false;