Changeset 218312 in webkit

Timestamp:

Jun 14, 2017 8:31:35 PM (7 years ago)

Author:

Yusuke Suzuki

Message:

Unreviewed, suppress invalid register alloation validation assertion in 32 bit part 2
​https://bugs.webkit.org/show_bug.cgi?id=172421

• dfg/DFGSpeculativeJIT.cpp:

(JSC::DFG::SpeculativeJIT::compileArrayIndexOf):

Location:

trunk/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• dfg/DFGSpeculativeJIT.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2017-06-14  Yusuke Suzuki  <utatane.tea@gmail.com>
+
+        Unreviewed, suppress invalid register alloation validation assertion in 32 bit part 2
+        https://bugs.webkit.org/show_bug.cgi?id=172421
+
+        * dfg/DFGSpeculativeJIT.cpp:
+        (JSC::DFG::SpeculativeJIT::compileArrayIndexOf):
+
 2017-06-14  Claudio Saavedra  <csaavedra@igalia.com>
 

trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp

@@ -7559 +7559 @@
         FPRReg tempFPR = tempDouble.fpr();
 
+#if ENABLE(DFG_REGISTER_ALLOCATION_VALIDATION)
+        m_jit.clearRegisterAllocationOffsets();
+#endif
+
         m_jit.zeroExtend32ToPtr(lengthGPR, lengthGPR);
         m_jit.zeroExtend32ToPtr(indexGPR, indexGPR);