Bug 481754 - js1_8_1/trace/regress-462459-05.js - trace new Array regressed (r=gal).

This commit is contained in:
Brendan Eich 2009-03-05 17:28:34 -08:00
parent b39f349267
commit 2cc1145443

View File

@ -6679,6 +6679,9 @@ TraceRecorder::functionCall(bool constructing, uintN argc)
return interpretedFunctionCall(fval, fun, argc, constructing);
}
if (FUN_SLOW_NATIVE(fun) && fun->u.n.native == js_Array)
return newArray(FUN_OBJECT(fun), argc, &tval + 1, &fval);
if (!(fun->flags & JSFUN_TRACEABLE))
ABORT_TRACE("untraceable native");
@ -6774,9 +6777,6 @@ TraceRecorder::functionCall(bool constructing, uintN argc)
next_specialization:;
} while ((known++)->flags & JSTN_MORE);
if (FUN_SLOW_NATIVE(fun) && fun->u.n.native == js_Array)
return newArray(FUN_OBJECT(fun), argc, &tval + 1, &fval);
if (!constructing)
ABORT_TRACE("unknown native");
if (!(fun->flags & JSFUN_TRACEABLE) && FUN_CLASP(fun))