[INFER] Call stubcc.leave() on negative zero in JSOP_MOD, bug 649973.

This commit is contained in:
Brian Hackett 2011-04-14 15:46:47 -07:00
parent 8cd051ac8e
commit bdbe8ac1c6
3 changed files with 9 additions and 0 deletions

View File

@ -0,0 +1,6 @@
var o = {
w: 2,
x: 3
};
var o = 430717;
o.x = 4;

View File

@ -0,0 +1,2 @@
x = 2147483647;
(x+10, false) ? [x % x] : [2 * x];

View File

@ -1054,6 +1054,7 @@ mjit::Compiler::jsop_mod()
if (gotNegZero.isSet()) {
stubcc.linkExit(gotNegZero.getJump(), Uses(2));
stubcc.leave();
OOL_STUBCALL(stubs::NegZeroHelper);
stubcc.rejoin(Changes(1));
}