Title: [187674] branches/jsc-tailcall/Source/_javascript_Core
- Revision
- 187674
- Author
- [email protected]
- Date
- 2015-07-31 13:17:08 -0700 (Fri, 31 Jul 2015)
Log Message
jsc-tailcall: REGRESSION(r187639): Need to restore callee saves in LLInt before tail call
https://bugs.webkit.org/show_bug.cgi?id=147500
Reviewed by Basile Clement.
Restore callee saves at the head of the prepareForTailCall() macro.
* llint/LowLevelInterpreter.asm:
Modified Paths
Diff
Modified: branches/jsc-tailcall/Source/_javascript_Core/ChangeLog (187673 => 187674)
--- branches/jsc-tailcall/Source/_javascript_Core/ChangeLog 2015-07-31 20:15:31 UTC (rev 187673)
+++ branches/jsc-tailcall/Source/_javascript_Core/ChangeLog 2015-07-31 20:17:08 UTC (rev 187674)
@@ -1,5 +1,16 @@
2015-07-31 Michael Saboff <[email protected]>
+ jsc-tailcall: REGRESSION(r187639): Need to restore callee saves in LLInt before tail call
+ https://bugs.webkit.org/show_bug.cgi?id=147500
+
+ Reviewed by Basile Clement.
+
+ Restore callee saves at the head of the prepareForTailCall() macro.
+
+ * llint/LowLevelInterpreter.asm:
+
+2015-07-31 Michael Saboff <[email protected]>
+
jsc-tailcall:Eliminate the unsafe use of regT5 in arityFixupGenerator() for X86-64 Windows
https://bugs.webkit.org/show_bug.cgi?id=147499
Modified: branches/jsc-tailcall/Source/_javascript_Core/llint/LowLevelInterpreter.asm (187673 => 187674)
--- branches/jsc-tailcall/Source/_javascript_Core/llint/LowLevelInterpreter.asm 2015-07-31 20:15:31 UTC (rev 187673)
+++ branches/jsc-tailcall/Source/_javascript_Core/llint/LowLevelInterpreter.asm 2015-07-31 20:17:08 UTC (rev 187674)
@@ -675,6 +675,7 @@
# sp points to the new frame
macro prepareForTailCall(callee, temp1, temp2)
+ restoreCalleeSavesUsedByLLInt()
# Masquerade ourselves as our own caller
loadp CallerFrame[cfr], temp1
loadp ReturnPC[cfr], temp2
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
