-
fpizlo@apple.com authored
https://bugs.webkit.org/show_bug.cgi?id=71505 Source/JavaScriptCore: Reviewed by Oliver Hunt. The bytecode generator was assuming that call_varargs never reuses the base register (i.e. the function being called) for the result. This is no longer true. * bytecompiler/BytecodeGenerator.cpp: (JSC::BytecodeGenerator::emitCallVarargs): * bytecompiler/BytecodeGenerator.h: * bytecompiler/NodesCodegen.cpp: (JSC::ApplyFunctionCallDotNode::emitBytecode): LayoutTests: Reviewed by Oliver Hunt. * fast/js/function-dot-apply-replace-base-expected.txt: Added. * fast/js/function-dot-apply-replace-base.html: Added. * fast/js/script-tests/cross-global-object-inline-global-var.js: (done): * fast/js/script-tests/function-dot-apply-replace-base.js: Added. (foo): (bar): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@100879 268f45cc-cd09-0410-ab3c-d52691b4dbfc
5da687a7