Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-11-08 12:37:37 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[INFER] Fix jsop_instanceof on known object, bug 642174.

Browse Source
This commit is contained in:
Brian Hackett 2011-03-16 10:41:44 -07:00
parent 60675bc44a
commit 67d6cf28c5
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
js/src/methodjit/Compiler.cpp
View File

@ -3227,7 +3227,7 @@ mjit::Compiler::inlineCallHelper(uint32 callImmArgc, bool callingNew)
void
mjit::Compiler::addCallSite(const InternalCallSite &site)
{
#ifdef DEBUG
#if 0 /* Expensive assertion on some tests. */
for (unsigned i = 0; i < callSites.length(); i++)
JS_ASSERT(site.pc != callSites[i].pc || site.id != callSites[i].id);
#endif
@ -5063,13 +5063,13 @@ mjit::Compiler::jsop_instanceof()
if (!rhs->isTypeKnown()) {
Jump j = frame.testObject(Assembler::NotEqual, rhs);
stubcc.linkExit(j, Uses(2));
RegisterID reg = frame.tempRegForData(rhs);
j = masm.testFunction(Assembler::NotEqual, reg);
stubcc.linkExit(j, Uses(2));
}
/* Test for bound functions. */
RegisterID obj = frame.tempRegForData(rhs);
Jump notFunction = masm.testFunction(Assembler::NotEqual, obj);
stubcc.linkExit(notFunction, Uses(2));
/* Test for bound functions. */
Jump isBound = masm.branchTest32(Assembler::NonZero, Address(obj, offsetof(JSObject, flags)),
Imm32(JSObject::BOUND_FUNCTION));
{