Title: [182001] trunk/Source/_javascript_Core
- Revision
- 182001
- Author
- [email protected]
- Date
- 2015-03-25 22:32:19 -0700 (Wed, 25 Mar 2015)
Log Message
Unreviewed, fix obvious goof that was causing 32-bit debug crashes. The 64-bit version did it
right, so this just makes 32-bit do the same.
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::emitCall):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (182000 => 182001)
--- trunk/Source/_javascript_Core/ChangeLog 2015-03-26 05:23:10 UTC (rev 182000)
+++ trunk/Source/_javascript_Core/ChangeLog 2015-03-26 05:32:19 UTC (rev 182001)
@@ -1,5 +1,13 @@
2015-03-25 Filip Pizlo <[email protected]>
+ Unreviewed, fix obvious goof that was causing 32-bit debug crashes. The 64-bit version did it
+ right, so this just makes 32-bit do the same.
+
+ * dfg/DFGSpeculativeJIT32_64.cpp:
+ (JSC::DFG::SpeculativeJIT::emitCall):
+
+2015-03-25 Filip Pizlo <[email protected]>
+
Fix a typo that ggaren found but that I didn't fix before.
* runtime/DirectArgumentsOffset.h:
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp (182000 => 182001)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2015-03-26 05:23:10 UTC (rev 182000)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2015-03-26 05:32:19 UTC (rev 182001)
@@ -747,6 +747,10 @@
DFG_ASSERT(m_jit.graph(), node, isFlushed());
+ // We don't need the arguments array anymore.
+ if (isVarargs)
+ use(node->child2());
+
// Now set up the "this" argument.
JSValueOperand thisArgument(this, node->child3());
GPRReg thisArgumentTagGPR = thisArgument.tagGPR();
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
