Title: [115105] trunk/Source/_javascript_Core
- Revision
- 115105
- Author
- [email protected]
- Date
- 2012-04-24 14:01:19 -0700 (Tue, 24 Apr 2012)
Log Message
Unreviewed, 32-bit build fix.
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::compile):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (115104 => 115105)
--- trunk/Source/_javascript_Core/ChangeLog 2012-04-24 20:52:51 UTC (rev 115104)
+++ trunk/Source/_javascript_Core/ChangeLog 2012-04-24 21:01:19 UTC (rev 115105)
@@ -1,5 +1,12 @@
2012-04-24 Filip Pizlo <[email protected]>
+ Unreviewed, 32-bit build fix.
+
+ * dfg/DFGSpeculativeJIT32_64.cpp:
+ (JSC::DFG::SpeculativeJIT::compile):
+
+2012-04-24 Filip Pizlo <[email protected]>
+
DFG performs incorrect DCE on (some?) intrinsics
https://bugs.webkit.org/show_bug.cgi?id=84746
<rdar://problem/11310772>
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp (115104 => 115105)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2012-04-24 20:52:51 UTC (rev 115104)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2012-04-24 21:01:19 UTC (rev 115105)
@@ -2055,7 +2055,7 @@
}
case CheckNumber: {
- if (!isPredictedNumber(m_state.forNode(node.child1()).m_type)) {
+ if (!isNumberPrediction(m_state.forNode(node.child1()).m_type)) {
JSValueOperand op1(this, node.child1());
JITCompiler::Jump isInteger = m_jit.branch32(MacroAssembler::Equal, op1.tagGPR(), TrustedImm32(JSValue::Int32Tag));
speculationCheck(
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
