Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-12-02 10:00:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 942604 - Add correct Float32 handling to MSetFrameArgument. r=bbouvier

Browse Source
This commit is contained in:
Kannan Vijayan 2013-11-26 12:46:33 -05:00
parent 2c36a671c8
commit 8800e00b9c
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
js/src/jit-test/tests/ion/bug942604.js Normal file
View File

@ -0,0 +1,11 @@
for (var j = 0; j < 999; ++j) {
try {
(function() {
function f(x) {
x = (new Float32Array)[i >> 2];
{}(w) = arguments[0]
}
return f
})()();
} catch (e) {}
}

6
js/src/jit/MIR.h
View File

@ -8325,7 +8325,8 @@ class MGetFrameArgument
// This MIR instruction is used to set an argument value in the frame.
class MSetFrameArgument
: public MUnaryInstruction
: public MUnaryInstruction,
public NoFloatPolicy<0>
{
uint32_t argno_;
@ -8357,6 +8358,9 @@ class MSetFrameArgument
AliasSet getAliasSet() const {
return AliasSet::Store(AliasSet::FrameArgument);
}
TypePolicy *typePolicy() {
return this;
}
};
class MRestCommon