Title: [102061] trunk/Source/_javascript_Core
- Revision
- 102061
- Author
- oli...@apple.com
- Date
- 2011-12-05 16:06:21 -0800 (Mon, 05 Dec 2011)
Log Message
Land uncommitted bit of float array support
https://bugs.webkit.org/show_bug.cgi?id=73873
Reviewed by Filip Pizlo.
* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::compileGetByValOnFloatTypedArray):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (102060 => 102061)
--- trunk/Source/_javascript_Core/ChangeLog 2011-12-05 23:57:28 UTC (rev 102060)
+++ trunk/Source/_javascript_Core/ChangeLog 2011-12-06 00:06:21 UTC (rev 102061)
@@ -1,3 +1,13 @@
+2011-12-05 Oliver Hunt <oli...@apple.com>
+
+ Land uncommitted bit of float array support
+ https://bugs.webkit.org/show_bug.cgi?id=73873
+
+ Reviewed by Filip Pizlo.
+
+ * dfg/DFGSpeculativeJIT.cpp:
+ (JSC::DFG::SpeculativeJIT::compileGetByValOnFloatTypedArray):
+
2011-12-05 Benjamin Poulain <benja...@webkit.org>
Update String::containsOnlyASCII() to handle 8 bits strings
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp (102060 => 102061)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp 2011-12-05 23:57:28 UTC (rev 102060)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp 2011-12-06 00:06:21 UTC (rev 102061)
@@ -1735,7 +1735,9 @@
FPRReg resultReg = result.fpr();
ASSERT(speculationRequirements != NoTypedArraySpecCheck);
MacroAssembler::Jump inBounds = m_jit.branch32(MacroAssembler::Below, propertyReg, MacroAssembler::Address(baseReg, descriptor.m_lengthOffset));
- m_jit.breakpoint();
+ GPRTemporary scratch(this);
+ m_jit.move(MacroAssembler::Imm32(0), scratch.gpr());
+ m_jit.convertInt32ToDouble(scratch.gpr(), resultReg);
MacroAssembler::Jump outOfBounds = m_jit.jump();
inBounds.link(&m_jit);
switch (elementSize) {
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
