Changeset 65847 in webkit

Timestamp:

Aug 23, 2010 5:04:01 PM (14 years ago)

Author:

oliver@apple.com

Message:

2010-08-23 Oliver Hunt <​oliver@apple.com>

Reviewed by Darin Adler.

[REGRESSION] Interpreter incorrectly excludes prototype chain when validating put_by_id_transition
​https://bugs.webkit.org/show_bug.cgi?id=44240
<rdar://problem/8328995>

Fix an error I introduced when cleaning up the interpreter side of the logic
to prevent setters being called in object initialisers.

• interpreter/Interpreter.cpp: (JSC::Interpreter::privateExecute):

Location:

trunk/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• interpreter/Interpreter.cpp (modified) (1 diff)

trunk/JavaScriptCore/ChangeLog

@@ +1 @@
+2010-08-23  Oliver Hunt  <oliver@apple.com>
+
+        Reviewed by Darin Adler.
+
+        [REGRESSION] Interpreter incorrectly excludes prototype chain when validating put_by_id_transition
+        https://bugs.webkit.org/show_bug.cgi?id=44240
+        <rdar://problem/8328995>
+
+        Fix an error I introduced when cleaning up the interpreter side of the logic
+        to prevent setters being called in object initialisers.
+
+        * interpreter/Interpreter.cpp:
+        (JSC::Interpreter::privateExecute):
+
 2010-08-23  Michael Saboff  <msaboff@apple.com>
 

trunk/JavaScriptCore/interpreter/Interpreter.cpp

@@ -2953 +2953 @@
                 int direct = vPC[8].u.operand;
                 
-                if (direct) {
+                if (!direct) {
                     RefPtr<Structure>* it = vPC[6].u.structureChain->head();