Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-03-01 13:57:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 937793 - Tweaks to template-array creation. r=bhackett

Browse Source 
--HG--
extra : rebase_source : dd75409a458a1ef5a6379251edb75f026d52c94c
This commit is contained in:
Jeff Walden 2013-12-18 20:14:16 -05:00
parent 4fa04d6a28
commit 44c105bc52
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
js/src/jit/BaselineIC.cpp
View File

@ -7819,10 +7819,13 @@ GetTemplateObjectForNative(JSContext *cx, HandleScript script, jsbytecode *pc,
// done to provide templates to Ion for inlining these natives later on.
if (native == js_Array) {
// Note: the template array won't be used if its length is inaccurately
// computed here. (We allocate here because compilation may occur on a
// separate thread where allocation is impossible.)
size_t count = 0;
if (args.hasDefined(1))
if (args.length() != 1)
count = args.length();
else if (args.hasDefined(0) && args[0].isInt32() && args[0].toInt32() > 0)
else if (args.length() == 1 && args[0].isInt32() && args[0].toInt32() >= 0)
count = args[0].toInt32();
res.set(NewDenseUnallocatedArray(cx, count, nullptr, TenuredObject));
if (!res)