wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

[INFER] Get object from right slot when handling overflowing INCPROP, bug 655998.

Browse Source
This commit is contained in:
Brian Hackett 2011-05-10 07:51:14 -07:00
parent 8cbde73ee4
commit d70c7dce96
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
js/src/jit-test/tests/jaeger/recompile/bug655998.js Normal file
View File

@ -0,0 +1,7 @@
function f(x) {
var y;
gc();
++x.x;
}
f(1);
f.call(2, 3);

2
js/src/methodjit/StubCalls.cpp
View File

@ -1074,7 +1074,7 @@ MonitorArithmeticOverflow(VMFrame &f, const Value &v)
case JSOP_DECPROP:
case JSOP_PROPINC:
case JSOP_PROPDEC:
ov = f.regs.sp[-4];
ov = f.regs.sp[-3];
break;
default: