Bug 1077427 - Add range analysis assertions after recovered-on-bailout instructions. r=sunfish

This commit is contained in:
Nicolas B. Pierron 2014-10-03 17:37:59 +02:00
parent 1dff572731
commit ca2b8408fb
2 changed files with 14 additions and 1 deletions

View File

@ -0,0 +1,12 @@
(function f() {
var i;
var x = 3;
var o1 = { a: x };
var o2 = { a: 2 };
for (i = 0; i < 5; i++)
o2.a = x;
Object.preventExtensions({ a: 1 });
for (i = 0; i < 5; i++)
;
})();

View File

@ -2085,7 +2085,8 @@ RangeAnalysis::addRangeAssertions()
while (insertIter->isBeta() ||
insertIter->isInterruptCheck() ||
insertIter->isInterruptCheckPar() ||
insertIter->isConstant())
insertIter->isConstant() ||
insertIter->isRecoveredOnBailout())
{
insertIter++;
}