Title: [195211] releases/WebKitGTK/webkit-2.10/Source/_javascript_Core
Revision
195211
Author
[email protected]
Date
2016-01-18 04:54:56 -0800 (Mon, 18 Jan 2016)

Log Message

Merge r194641 - [mips] Fix branchTruncateDoubleToUint32 implementation in macro assembler
https://bugs.webkit.org/show_bug.cgi?id=152782

Patch by Julien Brianceau <[email protected]> on 2016-01-06
Reviewed by Benjamin Poulain.

Already covered by LayoutTests/js/dfg-uint32array-overflow-values test.

* assembler/MacroAssemblerMIPS.h:
(JSC::MacroAssemblerMIPS::branchTruncateDoubleToUint32):

Modified Paths

Diff

Modified: releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/ChangeLog (195210 => 195211)


--- releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/ChangeLog	2016-01-18 12:54:13 UTC (rev 195210)
+++ releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/ChangeLog	2016-01-18 12:54:56 UTC (rev 195211)
@@ -1,5 +1,17 @@
 2016-01-06  Julien Brianceau  <[email protected]>
 
+        [mips] Fix branchTruncateDoubleToUint32 implementation in macro assembler
+        https://bugs.webkit.org/show_bug.cgi?id=152782
+
+        Reviewed by Benjamin Poulain.
+
+        Already covered by LayoutTests/js/dfg-uint32array-overflow-values test.
+
+        * assembler/MacroAssemblerMIPS.h:
+        (JSC::MacroAssemblerMIPS::branchTruncateDoubleToUint32):
+
+2016-01-06  Julien Brianceau  <[email protected]>
+
         [mips] Fix or32 implementation in macro assembler
         https://bugs.webkit.org/show_bug.cgi?id=152781
 

Modified: releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/assembler/MacroAssemblerMIPS.h (195210 => 195211)


--- releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/assembler/MacroAssemblerMIPS.h	2016-01-18 12:54:13 UTC (rev 195210)
+++ releases/WebKitGTK/webkit-2.10/Source/_javascript_Core/assembler/MacroAssemblerMIPS.h	2016-01-18 12:54:56 UTC (rev 195211)
@@ -2674,7 +2674,7 @@
     {
         m_assembler.truncwd(fpTempRegister, src);
         m_assembler.mfc1(dest, fpTempRegister);
-        return branch32(branchType == BranchIfTruncateFailed ? Equal : NotEqual, dest, TrustedImm32(0));
+        return branch32(branchType == BranchIfTruncateFailed ? Equal : NotEqual, dest, TrustedImm32(0x7fffffff));
     }
 
     // Result is undefined if the value is outside of the integer range.
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to