Bug 895144 - Treat asm.js Functions as long-lived by default; r=luke

--HG--
extra : rebase_source : 6e08bf3d0575d26de3ac6ba41d703168a1f4a429

js/src/frontend/Parser.cpp

@@ -471,6 +471,9 @@ FunctionBox::FunctionBox(ExclusiveContext *cx, ObjectBox* traceListHead, JSFunct
     usesApply(false),
     funCxFlags()
 {
+    // Functions created at parse time may be set singleton after parsing and
+    // baked into JIT code, so they must be allocated tenured. They are held by
+    // the JSScript so cannot be collected during a minor GC anyway.
     JS_ASSERT(fun->isTenured());
 
     if (!outerpc) {

js/src/ion/AsmJS.cpp

@@ -4664,9 +4664,10 @@ ParseFunction(ModuleCompiler &m, ParseNode **fnOut)
     if (!fn)
         return false;
 
+    // This flows into FunctionBox, so must be tenured.
     RootedFunction fun(m.cx(), NewFunction(m.cx(), NullPtr(), NULL, 0, JSFunction::INTERPRETED,
                                            m.cx()->global(), name, JSFunction::FinalizeKind,
-                                           GenericObject));
+                                           TenuredObject));
     if (!fun)
         return false;