Revision: 22206
Author: [email protected]
Date: Thu Jul 3 16:32:23 2014 UTC
Log: HGraphBuilder::BuildJSObjectCheck: Tighten instance type
comparison
[email protected]
Review URL: https://codereview.chromium.org/366083005
http://code.google.com/p/v8/source/detail?r=22206
Modified:
/branches/bleeding_edge/src/hydrogen.cc
=======================================
--- /branches/bleeding_edge/src/hydrogen.cc Tue Jul 1 15:02:31 2014 UTC
+++ /branches/bleeding_edge/src/hydrogen.cc Thu Jul 3 16:32:23 2014 UTC
@@ -1431,7 +1431,8 @@
mask);
HValue* sub_result = AddUncasted<HSub>(and_result,
Add<HConstant>(JS_OBJECT_TYPE));
- Add<HBoundsCheck>(sub_result, Add<HConstant>(0x100 - JS_OBJECT_TYPE));
+ Add<HBoundsCheck>(sub_result,
+ Add<HConstant>(LAST_JS_OBJECT_TYPE + 1 -
JS_OBJECT_TYPE));
}
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
