From f46cc768878fd5eec62beaa88a14250ee016165b Mon Sep 17 00:00:00 2001 From: Jan de Mooij Date: Thu, 29 Aug 2013 10:08:16 +0200 Subject: [PATCH] Bug 910240 part 1 - Add some missing setFoldedUnchecked calls. r=bhackett --- js/src/jit/IonBuilder.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/js/src/jit/IonBuilder.cpp b/js/src/jit/IonBuilder.cpp index fbf73c1434ed..8481eacde4bc 100644 --- a/js/src/jit/IonBuilder.cpp +++ b/js/src/jit/IonBuilder.cpp @@ -5220,6 +5220,8 @@ IonBuilder::jsop_eval(uint32_t argc) return false; callInfo.unwrapArgs(); + callInfo.fun()->setFoldedUnchecked(); + MDefinition *scopeChain = current->scopeChain(); MDefinition *string = callInfo.getArg(0); @@ -6526,6 +6528,7 @@ IonBuilder::getElemTryTypedStatic(bool *emitted, MDefinition *obj, MDefinition * // Emit LoadTypedArrayElementStatic. obj->setFoldedUnchecked(); + index->setFoldedUnchecked(); MLoadTypedArrayElementStatic *load = MLoadTypedArrayElementStatic::New(tarr, ptr); current->add(load); @@ -6651,6 +6654,7 @@ IonBuilder::getElemTryArgumentsInlined(bool *emitted, MDefinition *obj, MDefinit return true; // Emit inlined arguments. + obj->setFoldedUnchecked(); JS_ASSERT(!info().argsObjAliasesFormals()); @@ -7066,6 +7070,7 @@ IonBuilder::setElemTryTypedStatic(bool *emitted, MDefinition *object, // Emit StoreTypedArrayElementStatic. object->setFoldedUnchecked(); + index->setFoldedUnchecked(); // Clamp value to [0, 255] for Uint8ClampedArray. MDefinition *toWrite = value;