mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
Bug 940846: MArrayPush shouldn't take a Float32 as an input; r=sstangl
This commit is contained in:
parent
8410b3b034
commit
63c59d61ce
15
js/src/jit-test/tests/ion/bug940846.js
Normal file
15
js/src/jit-test/tests/ion/bug940846.js
Normal file
@ -0,0 +1,15 @@
|
||||
function a(f, i) {
|
||||
results = []
|
||||
for (var k = 0; k < 10; ++k) {
|
||||
gc();
|
||||
try {
|
||||
results.push(f(i[k]));
|
||||
} catch (e) {
|
||||
results.push(e);
|
||||
}
|
||||
}
|
||||
}
|
||||
g = (function(x, y) {
|
||||
return Math.fround((x ? Math.f : m0) ? w : Math.fround())
|
||||
})
|
||||
a(g, [Number.MAX_VALUE])
|
@ -5789,7 +5789,7 @@ class MArrayPopShift
|
||||
// Array.prototype.push on a dense array. Returns the new array length.
|
||||
class MArrayPush
|
||||
: public MBinaryInstruction,
|
||||
public SingleObjectPolicy
|
||||
public MixPolicy<SingleObjectPolicy, NoFloatPolicy<1> >
|
||||
{
|
||||
MArrayPush(MDefinition *object, MDefinition *value)
|
||||
: MBinaryInstruction(object, value)
|
||||
|
Loading…
Reference in New Issue
Block a user