Revision: 9696
Author: [email protected]
Date: Wed Oct 19 03:44:20 2011
Log: Bugfix for r9690.
BUG=arm debug test of mjsunit/elements-transition segfaults
Review URL: http://codereview.chromium.org/8342032
http://code.google.com/p/v8/source/detail?r=9696
Modified:
/branches/bleeding_edge/src/arm/code-stubs-arm.cc
=======================================
--- /branches/bleeding_edge/src/arm/code-stubs-arm.cc Wed Oct 19 02:04:35
2011
+++ /branches/bleeding_edge/src/arm/code-stubs-arm.cc Wed Oct 19 03:44:20
2011
@@ -6932,7 +6932,7 @@
// and FastElementsConversionStub::GenerateDoubleToObject
{ r2, r3, r9, EMIT_REMEMBERED_SET },
// FastElementsConversionStub::GenerateDoubleToObject
- { r6, r0, r3, EMIT_REMEMBERED_SET },
+ { r6, r0, r2, EMIT_REMEMBERED_SET },
{ r2, r6, r9, EMIT_REMEMBERED_SET },
// Null termination.
{ no_reg, no_reg, no_reg, EMIT_REMEMBERED_SET}
@@ -7336,15 +7336,15 @@
// Prepare for conversion loop.
__ add(r4, r4, Operand(FixedDoubleArray::kHeaderSize - kHeapObjectTag +
4));
- __ add(r3, r6, Operand(FixedArray::kHeaderSize - 4));
+ __ add(r3, r6, Operand(FixedArray::kHeaderSize));
__ add(r6, r6, Operand(kHeapObjectTag));
__ add(r5, r3, Operand(r5, LSL, 1));
__ LoadRoot(r7, Heap::kTheHoleValueRootIndex);
__ LoadRoot(r9, Heap::kHeapNumberMapRootIndex);
- // Using offsetted addresses to fully take advantage of pre/post-indexing
- // r3: begin of destination FixedArray element fields, not tagged, -4
+ // Using offsetted addresses in r4 to fully take advantage of
post-indexing.
+ // r3: begin of destination FixedArray element fields, not tagged
// r4: begin of source FixedDoubleArray element fields, not tagged, +4
- // r5: end of destination FixedArray, not tagged, -4
+ // r5: end of destination FixedArray, not tagged
// r6: destination FixedArray
// r7: the-hole pointer
// r9: heap number map
@@ -7369,9 +7369,10 @@
__ str(lr, FieldMemOperand(r0, HeapNumber::kExponentOffset));
__ ldr(lr, MemOperand(r4, 12, NegOffset));
__ str(lr, FieldMemOperand(r0, HeapNumber::kMantissaOffset));
- __ str(r0, MemOperand(r3, 4, PreIndex));
+ __ mov(r2, r3);
+ __ str(r0, MemOperand(r3, 4, PostIndex));
__ RecordWrite(r6,
- r3,
+ r2,
r0,
kLRHasBeenSaved,
kDontSaveFPRegs,
@@ -7381,7 +7382,7 @@
// Replace the-hole NaN with the-hole pointer.
__ bind(&convert_hole);
- __ str(r7, MemOperand(r3, 4, PreIndex));
+ __ str(r7, MemOperand(r3, 4, PostIndex));
__ bind(&entry);
__ cmp(r3, r5);
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
