Title: [194072] trunk/Source/_javascript_Core
Revision
194072
Author
[email protected]
Date
2015-12-14 16:30:53 -0800 (Mon, 14 Dec 2015)

Log Message

FTL B3 should be able to run n-body.js
https://bugs.webkit.org/show_bug.cgi?id=152281

Reviewed by Benjamin Poulain.

Fix a bug where m_captured was pointing to the start of the captured vars slot rather than the
end, like the rest of the FTL expected.

* ftl/FTLLowerDFGToLLVM.cpp:
(JSC::FTL::DFG::LowerDFGToLLVM::lower):

Modified Paths

Diff

Modified: trunk/Source/_javascript_Core/ChangeLog (194071 => 194072)


--- trunk/Source/_javascript_Core/ChangeLog	2015-12-15 00:11:45 UTC (rev 194071)
+++ trunk/Source/_javascript_Core/ChangeLog	2015-12-15 00:30:53 UTC (rev 194072)
@@ -1,3 +1,16 @@
+2015-12-14  Filip Pizlo  <[email protected]>
+
+        FTL B3 should be able to run n-body.js
+        https://bugs.webkit.org/show_bug.cgi?id=152281
+
+        Reviewed by Benjamin Poulain.
+
+        Fix a bug where m_captured was pointing to the start of the captured vars slot rather than the
+        end, like the rest of the FTL expected.
+
+        * ftl/FTLLowerDFGToLLVM.cpp:
+        (JSC::FTL::DFG::LowerDFGToLLVM::lower):
+
 2015-12-14  Benjamin Poulain  <[email protected]>
 
         Fix bad copy-paste in r194062

Modified: trunk/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp (194071 => 194072)


--- trunk/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp	2015-12-15 00:11:45 UTC (rev 194071)
+++ trunk/Source/_javascript_Core/ftl/FTLLowerDFGToLLVM.cpp	2015-12-15 00:30:53 UTC (rev 194072)
@@ -186,7 +186,9 @@
         createPhiVariables();
 
 #if FTL_USES_B3
-        m_captured = m_out.lockedStackSlot(sizeof(JSValue) * m_graph.m_nextMachineLocal);
+        size_t sizeOfCaptured = sizeof(JSValue) * m_graph.m_nextMachineLocal;
+        LValue capturedBase = m_out.lockedStackSlot(sizeOfCaptured);
+        m_captured = m_out.add(capturedBase, m_out.constIntPtr(sizeOfCaptured));
         m_ftlState.capturedValue = m_captured;
 #else // FTL_USES_B3
         LValue capturedAlloca = m_out.alloca(arrayType(m_out.int64, m_graph.m_nextMachineLocal));
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to