tor-browser

commit 78810a9f53f6e5271820be97a5e45145032e0983
parent 8a727550756a43f4a8bb3745e616f25705d660b8
Author: Iain Ireland <iireland@mozilla.com>
Date:   Fri, 24 Oct 2025 21:50:49 +0000

Bug 1995978: Check for JitRuntime in HasBaselineHint r=spidermonkey-reviewers,anba

Differential Revision: https://phabricator.services.mozilla.com/D270014

Diffstat:
M
js/src/builtin/TestingFunctions.cpp
 | 
6
++++--
A
js/src/jit-test/tests/basic/bug1995978.js
 | 
4
++++

2 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/js/src/builtin/TestingFunctions.cpp b/js/src/builtin/TestingFunctions.cpp
@@ -9597,7 +9597,8 @@ static bool SetBaselineHint(JSContext* cx, unsigned argc, Value* vp) {
     return false;
   }
 
-  if (!cx->runtime()->jitRuntime()->hasJitHintsMap()) {
+  if (!cx->runtime()->jitRuntime() ||
+      !cx->runtime()->jitRuntime()->hasJitHintsMap()) {
     args.rval().setUndefined();
     return true;
   }
@@ -9623,7 +9624,8 @@ static bool HasBaselineHint(JSContext* cx, unsigned argc, Value* vp) {
     return false;
   }
 
-  if (!cx->runtime()->jitRuntime()->hasJitHintsMap()) {
+  if (!cx->runtime()->jitRuntime() ||
+      !cx->runtime()->jitRuntime()->hasJitHintsMap()) {
     args.rval().setBoolean(false);
     return true;
   }
diff --git a/js/src/jit-test/tests/basic/bug1995978.js b/js/src/jit-test/tests/basic/bug1995978.js
@@ -0,0 +1,4 @@
+// |jit-test| --no-jit-backend
+
+setBaselineHint("a");
+assertEq(hasBaselineHint("a"), false);