wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Fix pinReg() around copyDataIntoReg() in jsop_bitop(). b=600419, r=dvander.

Browse Source
This commit is contained in:
Sean Stangl 2010-10-04 13:30:46 -04:00
parent 39060e35d5
commit 0d02e95a3d
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
js/src/methodjit/FastOps.cpp
View File

@ -524,14 +524,14 @@ mjit::Compiler::jsop_bitop(JSOp op)
RegisterID rr = frame.tempRegForData(rhs); RegisterID rr = frame.tempRegForData(rhs);
#endif #endif
frame.pinReg(rr);
if (lhs->isConstant()) { if (lhs->isConstant()) {
frame.pinReg(rr);
reg = frame.allocReg(); reg = frame.allocReg();
masm.move(Imm32(lhs->getValue().toInt32()), reg); masm.move(Imm32(lhs->getValue().toInt32()), reg);
frame.unpinReg(rr);
} else { } else {
reg = frame.copyDataIntoReg(lhs); reg = frame.copyDataIntoReg(lhs);
} }
frame.unpinReg(rr);
if (op == JSOP_LSH) { if (op == JSOP_LSH) {
masm.lshift32(rr, reg); masm.lshift32(rr, reg);

5
js/src/trace-test/tests/jaeger/bug600419.js Normal file
View File

@ -0,0 +1,5 @@
/* Don't assert. */
(function() {
var x;
[1].map(function(){}, x << x);
})()