Title: [199132] trunk/Source/_javascript_Core
Revision
199132
Author
[email protected]
Date
2016-04-06 18:44:23 -0700 (Wed, 06 Apr 2016)

Log Message

32-bit JSC stress/multi-put-by-offset-multiple-transitions.js failing
https://bugs.webkit.org/show_bug.cgi?id=156292

Reviewed by Benjamin Poulain.

Make sure that we stash the callsite index before calling operationReallocateStorageAndFinishPut.

* bytecode/PolymorphicAccess.cpp:
(JSC::AccessCase::generate):

Modified Paths

Diff

Modified: trunk/Source/_javascript_Core/ChangeLog (199131 => 199132)


--- trunk/Source/_javascript_Core/ChangeLog	2016-04-07 01:42:13 UTC (rev 199131)
+++ trunk/Source/_javascript_Core/ChangeLog	2016-04-07 01:44:23 UTC (rev 199132)
@@ -1,5 +1,17 @@
 2016-04-06  Filip Pizlo  <[email protected]>
 
+        32-bit JSC stress/multi-put-by-offset-multiple-transitions.js failing
+        https://bugs.webkit.org/show_bug.cgi?id=156292
+
+        Reviewed by Benjamin Poulain.
+
+        Make sure that we stash the callsite index before calling operationReallocateStorageAndFinishPut.
+
+        * bytecode/PolymorphicAccess.cpp:
+        (JSC::AccessCase::generate):
+
+2016-04-06  Filip Pizlo  <[email protected]>
+
         JSC test stress/arrowfunction-lexical-bind-superproperty.js failing
         https://bugs.webkit.org/show_bug.cgi?id=156309
 

Modified: trunk/Source/_javascript_Core/bytecode/PolymorphicAccess.cpp (199131 => 199132)


--- trunk/Source/_javascript_Core/bytecode/PolymorphicAccess.cpp	2016-04-07 01:42:13 UTC (rev 199131)
+++ trunk/Source/_javascript_Core/bytecode/PolymorphicAccess.cpp	2016-04-07 01:44:23 UTC (rev 199132)
@@ -1189,6 +1189,9 @@
             allocator.preserveUsedRegistersToScratchBufferForCall(jit, scratchBuffer, scratchGPR);
             if (needsToMakeRoomOnStackForCCall)
                 jit.makeSpaceOnStackForCCall();
+            jit.store32(
+                CCallHelpers::TrustedImm32(state.originalCallSiteIndex().bits()),
+                CCallHelpers::tagFor(static_cast<VirtualRegister>(JSStack::ArgumentCount)));
 #if USE(JSVALUE64)
             jit.setupArgumentsWithExecState(
                 baseGPR,
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to