Reviewers: Michael Starzinger,
Message:
PTAL
Description:
ARM: Ensure reload of elements pointer in StoreFastDoubleElement stub
[email protected]
TEST=test/mjsunit/regress/regress-125515.js
BUG=chromium:125515
Please review this at http://codereview.chromium.org/10298010/
SVN Base: https://v8.googlecode.com/svn/branches/bleeding_edge
Affected files:
M src/arm/stub-cache-arm.cc
Index: src/arm/stub-cache-arm.cc
diff --git a/src/arm/stub-cache-arm.cc b/src/arm/stub-cache-arm.cc
index
1cd0e655ee4c118d6c46e9072d1c4517a66c7624..40ee585d6785f423d6f1ffc5890c764c74fe9f41
100644
--- a/src/arm/stub-cache-arm.cc
+++ b/src/arm/stub-cache-arm.cc
@@ -4475,6 +4475,8 @@ void
KeyedStoreStubCompiler::GenerateStoreFastDoubleElement(
// Increment the length of the array.
__ mov(length_reg, Operand(Smi::FromInt(1)));
__ str(length_reg, FieldMemOperand(receiver_reg,
JSArray::kLengthOffset));
+ __ ldr(elements_reg,
+ FieldMemOperand(receiver_reg, JSObject::kElementsOffset));
__ jmp(&finish_store);
__ bind(&check_capacity);
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
