Revision: 21733
Author: [email protected]
Date: Tue Jun 10 09:01:45 2014 UTC
Log: Bugfix in inlined versions of Array.indexOf() and
Array.lastIndexOf() with a regression test.
BUG=chromium:381534
LOG=N
[email protected]
Review URL: https://codereview.chromium.org/319343002
http://code.google.com/p/v8/source/detail?r=21733
Added:
/branches/bleeding_edge/test/mjsunit/regress/regress-crbug-381534.js
Modified:
/branches/bleeding_edge/src/hydrogen-instructions.cc
/branches/bleeding_edge/src/hydrogen.cc
=======================================
--- /dev/null
+++ /branches/bleeding_edge/test/mjsunit/regress/regress-crbug-381534.js
Tue Jun 10 09:01:45 2014 UTC
@@ -0,0 +1,40 @@
+// Copyright 2014 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+var obj = {};
+
+function f(v) {
+ var v1 = -(4/3);
+ var v2 = 1;
+ var arr = new Array(+0, true, 0, -0, false, undefined, null, "0", obj,
v1, -(4/3), -1.3333333333333, "str", v2, 1, false);
+ assertEquals(10, arr.lastIndexOf(-(4/3)));
+ assertEquals(9, arr.indexOf(-(4/3)));
+
+ assertEquals(10, arr.lastIndexOf(v));
+ assertEquals(9, arr.indexOf(v));
+
+ assertEquals(8, arr.lastIndexOf(obj));
+ assertEquals(8, arr.indexOf(obj));
+}
+
+function g(v, x, index) {
+ var arr = new Array({}, x-1.1, x-2, x-3.1);
+ assertEquals(index, arr.indexOf(0));
+ assertEquals(index, arr.lastIndexOf(0));
+
+ assertEquals(index, arr.indexOf(v));
+ assertEquals(index, arr.lastIndexOf(v));
+}
+
+f(-(4/3));
+f(-(4/3));
+%OptimizeFunctionOnNextCall(f);
+f(-(4/3));
+
+g(0, 2, 2);
+g(0, 3.1, 3);
+%OptimizeFunctionOnNextCall(g);
+g(0, 1.1, 1);
=======================================
--- /branches/bleeding_edge/src/hydrogen-instructions.cc Thu Jun 5
07:33:01 2014 UTC
+++ /branches/bleeding_edge/src/hydrogen-instructions.cc Tue Jun 10
09:01:45 2014 UTC
@@ -1540,7 +1540,10 @@
HConstant* c = HConstant::cast(value);
if (c->HasNumberValue()) {
double double_res = c->DoubleValue();
- if (representation.CanContainDouble(double_res)) {
+ if (representation.IsDouble()) {
+ return HConstant::New(zone, context, double_res);
+
+ } else if (representation.CanContainDouble(double_res)) {
return HConstant::New(zone, context,
static_cast<int32_t>(double_res),
representation);
=======================================
--- /branches/bleeding_edge/src/hydrogen.cc Tue Jun 10 04:47:06 2014 UTC
+++ /branches/bleeding_edge/src/hydrogen.cc Tue Jun 10 09:01:45 2014 UTC
@@ -8524,41 +8524,47 @@
}
if_isstring.Else();
{
- IfBuilder if_isheapnumber(this);
- if_isheapnumber.IfNot<HIsSmiAndBranch>(search_element);
- HCompareMap* isheapnumber = if_isheapnumber.AndIf<HCompareMap>(
+ IfBuilder if_isnumber(this);
+ if_isnumber.If<HIsSmiAndBranch>(search_element);
+ if_isnumber.OrIf<HCompareMap>(
search_element, isolate()->factory()->heap_number_map());
- if_isheapnumber.Then();
+ if_isnumber.Then();
{
- HValue* search_number = Add<HLoadNamedField>(
- search_element, isheapnumber,
- HObjectAccess::ForHeapNumberValue());
+ HValue* search_number =
+ AddUncasted<HForceRepresentation>(search_element,
+ Representation::Double());
LoopBuilder loop(this, context(), direction);
{
HValue* index = loop.BeginBody(initial, terminating, token);
HValue* element = AddUncasted<HLoadKeyed>(
elements, index, static_cast<HValue*>(NULL),
kind, ALLOW_RETURN_HOLE);
- IfBuilder if_issame(this);
- if_issame.IfNot<HIsSmiAndBranch>(element);
- HCompareMap* issame = if_issame.AndIf<HCompareMap>(
+
+ IfBuilder if_element_isnumber(this);
+ if_element_isnumber.If<HIsSmiAndBranch>(element);
+ if_element_isnumber.OrIf<HCompareMap>(
element, isolate()->factory()->heap_number_map());
- if_issame.And();
- HValue* number = Add<HLoadNamedField>(
- element, issame, HObjectAccess::ForHeapNumberValue());
- if_issame.If<HCompareNumericAndBranch>(
- number, search_number, Token::EQ_STRICT);
- if_issame.Then();
+ if_element_isnumber.Then();
{
- Drop(1);
- Push(index);
- loop.Break();
+ HValue* number =
+ AddUncasted<HForceRepresentation>(element,
+
Representation::Double());
+ IfBuilder if_issame(this);
+ if_issame.If<HCompareNumericAndBranch>(
+ number, search_number, Token::EQ_STRICT);
+ if_issame.Then();
+ {
+ Drop(1);
+ Push(index);
+ loop.Break();
+ }
+ if_issame.End();
}
- if_issame.End();
+ if_element_isnumber.End();
}
loop.EndBody();
}
- if_isheapnumber.Else();
+ if_isnumber.Else();
{
LoopBuilder loop(this, context(), direction);
{
@@ -8579,7 +8585,7 @@
}
loop.EndBody();
}
- if_isheapnumber.End();
+ if_isnumber.End();
}
if_isstring.End();
}
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
