Reviewers: ,

Message:
Tiny review for an annoying bug! (The one giving "CHECK(holder !=
__null) failed" errors).

Description:
X64: Fix bug in for-in iteration.

Please review this at http://codereview.chromium.org/155213

Affected files:
   M src/x64/codegen-x64.cc


Index: src/x64/codegen-x64.cc
diff --git a/src/x64/codegen-x64.cc b/src/x64/codegen-x64.cc
index  
d143558bc4bc3d6f441cb865773acb609ea0f72c..d3f2021580dd7a80e015331dade960f142ac8d53
  
100644
--- a/src/x64/codegen-x64.cc
+++ b/src/x64/codegen-x64.cc
@@ -1267,7 +1267,7 @@ void  
CodeGenerator::VisitForInStatement(ForInStatement* node) {

    frame_->EmitPush(rax);  // <- slot 3
    frame_->EmitPush(rdx);  // <- slot 2
-  __ movq(rax, FieldOperand(rdx, FixedArray::kLengthOffset));
+  __ movsxlq(rax, FieldOperand(rdx, FixedArray::kLengthOffset));
    __ shl(rax, Immediate(kSmiTagSize));
    frame_->EmitPush(rax);  // <- slot 1
    frame_->EmitPush(Immediate(Smi::FromInt(0)));  // <- slot 0
@@ -1279,7 +1279,7 @@ void  
CodeGenerator::VisitForInStatement(ForInStatement* node) {
    frame_->EmitPush(rax);  // <- slot 2

    // Push the length of the array and the initial index onto the stack.
-  __ movq(rax, FieldOperand(rax, FixedArray::kLengthOffset));
+  __ movsxlq(rax, FieldOperand(rax, FixedArray::kLengthOffset));
    __ shl(rax, Immediate(kSmiTagSize));
    frame_->EmitPush(rax);  // <- slot 1
    frame_->EmitPush(Immediate(Smi::FromInt(0)));  // <- slot 0
@@ -1299,8 +1299,8 @@ void  
CodeGenerator::VisitForInStatement(ForInStatement* node) {
    __ movq(rdx, frame_->ElementAt(2));
    ASSERT(kSmiTagSize == 1 && kSmiTag == 0);
    // Multiplier is times_4 since rax is already a Smi.
-  __ movq(rbx, Operand(rdx, rax, times_4,
-                       FixedArray::kHeaderSize - kHeapObjectTag));
+  __ movq(rbx, FieldOperand(rdx, rax, times_4,
+                            FixedArray::kHeaderSize));

    // Get the expected map from the stack or a zero map in the
    // permanent slow case rax: current iteration count rbx: i'th entry



--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---

Reply via email to