Changeset 194641 in webkit

Timestamp:

Jan 6, 2016 10:10:26 AM (8 years ago)

Author:

commit-queue@webkit.org

Message:

[mips] Fix branchTruncateDoubleToUint32 implementation in macro assembler
​https://bugs.webkit.org/show_bug.cgi?id=152782

Patch by Julien Brianceau <​jbriance@cisco.com> on 2016-01-06
Reviewed by Benjamin Poulain.

Already covered by LayoutTests/js/dfg-uint32array-overflow-values test.

• assembler/MacroAssemblerMIPS.h:

(JSC::MacroAssemblerMIPS::branchTruncateDoubleToUint32):

Location:

trunk/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• assembler/MacroAssemblerMIPS.h (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2016-01-06  Julien Brianceau  <jbriance@cisco.com>
+
+        [mips] Fix branchTruncateDoubleToUint32 implementation in macro assembler
+        https://bugs.webkit.org/show_bug.cgi?id=152782
+
+        Reviewed by Benjamin Poulain.
+
+        Already covered by LayoutTests/js/dfg-uint32array-overflow-values test.
+
+        * assembler/MacroAssemblerMIPS.h:
+        (JSC::MacroAssemblerMIPS::branchTruncateDoubleToUint32):
+
 2016-01-06  Julien Brianceau  <jbriance@cisco.com>
 

trunk/Source/JavaScriptCore/assembler/MacroAssemblerMIPS.h

@@ -2692 +2692 @@
         m_assembler.truncwd(fpTempRegister, src);
         m_assembler.mfc1(dest, fpTempRegister);
-        return branch32(branchType == BranchIfTruncateFailed ? Equal : NotEqual, dest, TrustedImm32(0));
+        return branch32(branchType == BranchIfTruncateFailed ? Equal : NotEqual, dest, TrustedImm32(0x7fffffff));
     }