Reviewers: Kevin Millikin,
Message:
This is based on r9619 which had tests failing. I added a reliable
reproduction
as a unit test.
The plan is to land this together with my previous change that enabled
inlining
calls-as-function.
Right now, wiring the exits of inlined functions and fixing up the
environment
is distributed in many places. Maybe we can find a way to do this in one
place
instead.
Description:
Fix bug in environment simulation after inlined call-as-function.
This change is based on my previous change enabling inlining
calls-as-function
fixing the bugs related to deoptimization.
The function value on top of the environment was dropped too late in the old
code.
As a result we could get a wrong value on top after deoptimization.
Please review this at http://codereview.chromium.org/8360001/
SVN Base: http://v8.googlecode.com/svn/branches/bleeding_edge/
Affected files:
M src/deoptimizer.cc
M src/hydrogen.h
M src/hydrogen.cc
A test/mjsunit/compiler/regress-deopt-call-as-function.js
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
