Revision: 11483
Author: [email protected]
Date: Thu May 3 00:09:17 2012
Log: ARM: Ensure reload of elements pointer in StoreFastDoubleElement
stub
[email protected]
TEST=test/mjsunit/regress/regress-125515.js
BUG=chromium:125515
Review URL: https://chromiumcodereview.appspot.com/10298010
http://code.google.com/p/v8/source/detail?r=11483
Modified:
/branches/bleeding_edge/src/arm/stub-cache-arm.cc
=======================================
--- /branches/bleeding_edge/src/arm/stub-cache-arm.cc Fri Apr 13 02:38:00
2012
+++ /branches/bleeding_edge/src/arm/stub-cache-arm.cc Thu May 3 00:09:17
2012
@@ -4475,6 +4475,8 @@
// Increment the length of the array.
__ mov(length_reg, Operand(Smi::FromInt(1)));
__ str(length_reg, FieldMemOperand(receiver_reg,
JSArray::kLengthOffset));
+ __ ldr(elements_reg,
+ FieldMemOperand(receiver_reg, JSObject::kElementsOffset));
__ jmp(&finish_store);
__ bind(&check_capacity);
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
