Title: [147481] branches/dfgFourthTier/Source/_javascript_Core
Revision
147481
Author
[email protected]
Date
2013-04-02 11:56:51 -0700 (Tue, 02 Apr 2013)

Log Message

fourthTier: FTL should use the right abstract heap for Int32 array accesses
https://bugs.webkit.org/show_bug.cgi?id=113759

Reviewed by Mark Hahnenberg.

* ftl/FTLLowerDFGToLLVM.cpp:
(JSC::FTL::LowerDFGToLLVM::compileGetByVal):

Modified Paths

Diff

Modified: branches/dfgFourthTier/Source/_javascript_Core/ChangeLog (147480 => 147481)


--- branches/dfgFourthTier/Source/_javascript_Core/ChangeLog	2013-04-02 18:54:53 UTC (rev 147480)
+++ branches/dfgFourthTier/Source/_javascript_Core/ChangeLog	2013-04-02 18:56:51 UTC (rev 147481)
@@ -1,5 +1,15 @@
 2013-04-02  Filip Pizlo  <[email protected]>
 
+        fourthTier: FTL should use the right abstract heap for Int32 array accesses
+        https://bugs.webkit.org/show_bug.cgi?id=113759
+
+        Reviewed by Mark Hahnenberg.
+
+        * ftl/FTLLowerDFGToLLVM.cpp:
+        (JSC::FTL::LowerDFGToLLVM::compileGetByVal):
+
+2013-04-02  Filip Pizlo  <[email protected]>
+
         fourthTier: FTL should support fast property stores
         https://bugs.webkit.org/show_bug.cgi?id=113757
 

Modified: branches/dfgFourthTier/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp (147480 => 147481)


--- branches/dfgFourthTier/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp	2013-04-02 18:54:53 UTC (rev 147480)
+++ branches/dfgFourthTier/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp	2013-04-02 18:56:51 UTC (rev 147481)
@@ -761,8 +761,9 @@
                         index, m_out.load32(storage, m_heaps.Butterfly_publicLength)));
                 
                 LValue result = m_out.load64(m_out.baseIndex(
-                    m_heaps.indexedContiguousProperties, storage,
-                    m_out.zeroExt(index, m_out.intPtr),
+                    m_node->arrayMode().type() == Array::Int32 ?
+                        m_heaps.indexedInt32Properties : m_heaps.indexedContiguousProperties,
+                    storage, m_out.zeroExt(index, m_out.intPtr),
                     m_state.forNode(m_node->child2()).m_value));
                 speculate(LoadFromHole, 0, 0, m_out.isZero64(result));
                 m_jsValueValues.add(m_node, result);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to