Author: [email protected]
Date: Tue Mar 31 09:07:48 2009
New Revision: 1658
Added:
trunk/test/mjsunit/regress/regress-294.js
- copied unchanged from r1655,
/branches/bleeding_edge/test/mjsunit/regress/regress-294.js
Modified:
trunk/src/api.cc
trunk/src/virtual-frame-ia32.cc
Log:
Merge bugfix for issue 294 from bleeding_edge to trunk.
Review URL: http://codereview.chromium.org/57057
Modified: trunk/src/api.cc
==============================================================================
--- trunk/src/api.cc (original)
+++ trunk/src/api.cc Tue Mar 31 09:07:48 2009
@@ -2279,7 +2279,7 @@
const char* v8::V8::GetVersion() {
- return "1.1.4";
+ return "1.1.4.1";
}
Modified: trunk/src/virtual-frame-ia32.cc
==============================================================================
--- trunk/src/virtual-frame-ia32.cc (original)
+++ trunk/src/virtual-frame-ia32.cc Tue Mar 31 09:07:48 2009
@@ -977,6 +977,8 @@
Use(temp.reg(), index);
FrameElement new_element =
FrameElement::RegisterElement(temp.reg(), FrameElement::SYNCED);
+ // Preserve the copy flag on the element.
+ if (element.is_copied()) new_element.set_copied();
elements_[index] = new_element;
__ mov(temp.reg(), Operand(ebp, fp_relative(index)));
return Result(temp.reg(), cgen_);
--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---