wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 908939 - Use the original function to construct the |this| type set in inline dispatch in Ion. (r=jandem)

Browse Source
This commit is contained in:
Shu-yu Guo 2013-08-27 16:01:54 -07:00
parent 57b9fa9ee2
commit cdab9c69e0
2 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
js/src/jit-test/tests/parallel/bug908939.js Normal file
View File

@ -0,0 +1,13 @@
if (getBuildConfiguration().parallelJS) {
x = ParallelArray([9937], function() {
return /x/
})
Object.defineProperty(this, "y", {
get: function() {
return Object.create(x)
}
})
y + x
x = x.scatter([]);
+ y
}

2
js/src/jit/IonBuilder.cpp
View File

@ -4295,7 +4295,7 @@ IonBuilder::inlineCalls(CallInfo &callInfo, AutoObjectVector &targets,
if (maybeCache) {
JS_ASSERT(callInfo.thisArg() == maybeCache->object());
types::StackTypeSet *targetThisTypes =
maybeCache->propTable()->buildTypeSetForFunction(target);
maybeCache->propTable()->buildTypeSetForFunction(original);
if (!targetThisTypes)
return false;
maybeCache->object()->setResultTypeSet(targetThisTypes);