Changeset 218113 in webkit

Timestamp:

Jun 12, 2017 11:42:47 AM (7 years ago)

Author:

Yusuke Suzuki

Message:

Unreviewed, suppress invalid register alloation validation assertion in 32 bit
​https://bugs.webkit.org/show_bug.cgi?id=172421

• dfg/DFGSpeculativeJIT.cpp:

(JSC::DFG::SpeculativeJIT::compileArrayIndexOf):

Location:

trunk/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• dfg/DFGSpeculativeJIT.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2017-06-12  Yusuke Suzuki  <utatane.tea@gmail.com>
+
+        Unreviewed, suppress invalid register alloation validation assertion in 32 bit
+        https://bugs.webkit.org/show_bug.cgi?id=172421
+
+        * dfg/DFGSpeculativeJIT.cpp:
+        (JSC::DFG::SpeculativeJIT::compileArrayIndexOf):
+
 2017-06-12  Oleksandr Skachkov  <gskachkov@gmail.com>
 

trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp

@@ -7481 +7481 @@
     case ObjectUse: {
         auto emitLoop = [&] (auto emitCompare) {
+#if ENABLE(DFG_REGISTER_ALLOCATION_VALIDATION)
+            m_jit.clearRegisterAllocationOffsets();
+#endif
+
             m_jit.zeroExtend32ToPtr(lengthGPR, lengthGPR);
             m_jit.zeroExtend32ToPtr(indexGPR, indexGPR);