Changeset 228459 in webkit

Timestamp:

Feb 13, 2018 10:05:38 PM (6 years ago)

Author:

jmarcell@apple.com

Message:

Cherry-pick r228438. rdar://problem/37521089

Location:

branches/safari-605-branch/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• dfg/DFGSpeculativeJIT32_64.cpp (modified) (1 diff)

branches/safari-605-branch/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2018-02-13  Jason Marcell  <jmarcell@apple.com>
+
+        Cherry-pick r228438. rdar://problem/37521089
+
+    2018-02-13  Saam Barati  <sbarati@apple.com>
+
+            Follup fix to r228411 for 32-bit builds. I missed a place where we used non vararg getter for child2().
+
+            * dfg/DFGSpeculativeJIT32_64.cpp:
+            (JSC::DFG::SpeculativeJIT::compile):
+
 2018-02-13  Jason Marcell  <jmarcell@apple.com>
 

branches/safari-605-branch/Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp

@@ -2577 +2577 @@
                 }
 
-                if (node->child2().useKind() == SymbolUse) {
+                if (m_graph.varArgChild(node, 1).useKind() == SymbolUse) {
                     compileGetByValForObjectWithSymbol(node);
                     break;