Bug 781855 - Ensure setprop caches allow 'own' property markings on added properties. (r=bhackett)

This commit is contained in:
Eric Faust 2012-08-22 23:21:19 -07:00
parent 44cc0c4f11
commit 8bfeeee008

View File

@ -447,6 +447,10 @@ IonCacheSetProperty::attachNativeAdding(JSContext *cx, JSObject *obj, const Shap
Label failures; Label failures;
/* Guard the type of the object */
masm.branchPtr(Assembler::NotEqual, Address(object(), JSObject::offsetOfType()),
ImmGCPtr(obj->type()), &failures);
/* Guard shapes along prototype chain. */ /* Guard shapes along prototype chain. */
masm.branchTestObjShape(Assembler::NotEqual, object(), oldShape, &failures); masm.branchTestObjShape(Assembler::NotEqual, object(), oldShape, &failures);