mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
Fix assert in typed array IC (bug 624518, r=cdleary).
This commit is contained in:
parent
49b0d53f93
commit
33912b4457
@ -261,7 +261,9 @@ GenConversionForIntArray(Assembler &masm, js::TypedArray *tarray, const ValueRem
|
||||
|
||||
if (!vr.isTypeKnown() || vr.knownType() != JSVAL_TYPE_INT32) {
|
||||
// If a conversion is necessary, save registers now.
|
||||
Jump checkInt32 = masm.testInt32(Assembler::Equal, vr.typeReg());
|
||||
MaybeJump checkInt32;
|
||||
if (!vr.isTypeKnown())
|
||||
checkInt32 = masm.testInt32(Assembler::Equal, vr.typeReg());
|
||||
|
||||
// Store the value to convert.
|
||||
StackMarker vp = masm.allocStack(sizeof(Value), sizeof(double));
|
||||
@ -288,7 +290,8 @@ GenConversionForIntArray(Assembler &masm, js::TypedArray *tarray, const ValueRem
|
||||
saveForCall.restore();
|
||||
masm.freeStack(vp);
|
||||
|
||||
checkInt32.linkTo(masm.label(), &masm);
|
||||
if (checkInt32.isSet())
|
||||
checkInt32.get().linkTo(masm.label(), &masm);
|
||||
}
|
||||
|
||||
// Performing clamping, if needed.
|
||||
|
Loading…
Reference in New Issue
Block a user