Reviewers: Michael Starzinger,

Description:
Merged r11507 into 3.9 branch.

MIPS: Ensure reload of elements pointer in StoreFastDoubleElement stub

[email protected]


Please review this at https://chromiumcodereview.appspot.com/10365010/

SVN Base: https://v8.googlecode.com/svn/branches/3.9

Affected files:
  M src/mips/stub-cache-mips.cc
  M src/version.cc


Index: src/mips/stub-cache-mips.cc
diff --git a/src/mips/stub-cache-mips.cc b/src/mips/stub-cache-mips.cc
index f7b94b926144931393232bc96743a2637e169383..f1a8c89f5377e7c522dd4aadbd9412720c6f2073 100644
--- a/src/mips/stub-cache-mips.cc
+++ b/src/mips/stub-cache-mips.cc
@@ -4494,6 +4494,8 @@ void KeyedStoreStubCompiler::GenerateStoreFastDoubleElement(
     // Increment the length of the array.
     __ li(length_reg, Operand(Smi::FromInt(1)));
__ sw(length_reg, FieldMemOperand(receiver_reg, JSArray::kLengthOffset));
+    __ lw(elements_reg,
+          FieldMemOperand(receiver_reg, JSObject::kElementsOffset));
     __ jmp(&finish_store);

     __ bind(&check_capacity);
Index: src/version.cc
diff --git a/src/version.cc b/src/version.cc
index 91f714bc76d55e66f08850247984ea1cd9562907..d0240481c9f01e6be9c9841ba1aa7986529a7328 100644
--- a/src/version.cc
+++ b/src/version.cc
@@ -35,7 +35,7 @@
 #define MAJOR_VERSION     3
 #define MINOR_VERSION     9
 #define BUILD_NUMBER      24
-#define PATCH_LEVEL       20
+#define PATCH_LEVEL       21
 // Use 1 for candidates and 0 otherwise.
 // (Boolean macro values are not supported by all preprocessors.)
 #define IS_CANDIDATE_VERSION 0


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to