Changeset 195473 in webkit

Timestamp:

Jan 22, 2016 2:12:59 PM (8 years ago)

Author:

sbarati@apple.com

Message:

op_profile_type 32-bit LLInt implementation has a bug
​https://bugs.webkit.org/show_bug.cgi?id=153368

Reviewed by Michael Saboff.

r189293 changed which registers were used, specifically
using t5 instead of t4. That change forgot to replace
t4 with t5 in one specific instance.

• llint/LowLevelInterpreter32_64.asm:

Location:

trunk/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• llint/LowLevelInterpreter32_64.asm (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2016-01-22  Saam barati  <sbarati@apple.com>
+
+        op_profile_type 32-bit LLInt implementation has a bug
+        https://bugs.webkit.org/show_bug.cgi?id=153368
+
+        Reviewed by Michael Saboff.
+
+        r189293 changed which registers were used, specifically
+        using t5 instead of t4. That change forgot to replace
+        t4 with t5 in one specific instance.
+
+        * llint/LowLevelInterpreter32_64.asm:
+
 2016-01-22  Filip Pizlo  <fpizlo@apple.com>
 

trunk/Source/JavaScriptCore/llint/LowLevelInterpreter32_64.asm

@@ -2402 +2402 @@
     loadConstantOrVariable(t2, t5, t0)
 
-    bieq t4, EmptyValueTag, .opProfileTypeDone
+    bieq t5, EmptyValueTag, .opProfileTypeDone
 
     # t2 is holding the pointer to the current log entry.