mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-01-27 15:55:16 +00:00
Backed out changeset b822456c6e2f (bug 1175714) for mass assertion failures on a CLOSED TREE
This commit is contained in:
parent
e539211474
commit
9faed39f11
@ -1095,12 +1095,8 @@ IonBuilder::initParameters()
|
||||
// interpreter and didn't accumulate type information, try to use that OSR
|
||||
// frame to determine possible initial types for 'this' and parameters.
|
||||
|
||||
if (thisTypes->empty() && baselineFrame_) {
|
||||
TypeSet::Type type = baselineFrame_->thisType;
|
||||
if (type.isSingleton())
|
||||
checkNurseryObject(type.singleton());
|
||||
thisTypes->addType(type, alloc_->lifoAlloc());
|
||||
}
|
||||
if (thisTypes->empty() && baselineFrame_)
|
||||
thisTypes->addType(baselineFrame_->thisType, alloc_->lifoAlloc());
|
||||
|
||||
MParameter* param = MParameter::New(alloc(), MParameter::THIS_SLOT, thisTypes);
|
||||
current->add(param);
|
||||
@ -1111,10 +1107,7 @@ IonBuilder::initParameters()
|
||||
if (types->empty() && baselineFrame_ &&
|
||||
!script_->baselineScript()->modifiesArguments())
|
||||
{
|
||||
TypeSet::Type type = baselineFrame_->argTypes[i];
|
||||
if (type.isSingleton())
|
||||
checkNurseryObject(type.singleton());
|
||||
types->addType(type, alloc_->lifoAlloc());
|
||||
types->addType(baselineFrame_->argTypes[i], alloc_->lifoAlloc());
|
||||
}
|
||||
|
||||
param = MParameter::New(alloc(), i, types);
|
||||
@ -7002,9 +6995,6 @@ IonBuilder::newPendingLoopHeader(MBasicBlock* predecessor, jsbytecode* pc, bool
|
||||
else
|
||||
existingType = baselineFrame_->varTypes[var];
|
||||
|
||||
if (existingType.isSingleton())
|
||||
checkNurseryObject(existingType.singleton());
|
||||
|
||||
// Extract typeset from value.
|
||||
LifoAlloc* lifoAlloc = alloc().lifoAlloc();
|
||||
TemporaryTypeSet* typeSet =
|
||||
|
Loading…
x
Reference in New Issue
Block a user