-
fpizlo@apple.com authored
https://bugs.webkit.org/show_bug.cgi?id=101114 Reviewed by Gavin Barraclough. As in https://bugs.webkit.org/show_bug.cgi?id=101112, this was only wrong when Float64Array descriptors hadn't been initialized yet. That happens rarely, but when it does happen, we would crash. This would also become much more wrong if we ever put type size info (num bytes, etc) in the descriptor and used that directly. So it's good to fix it. * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::typedArrayDescriptor): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@133361 268f45cc-cd09-0410-ab3c-d52691b4dbfc
774c3811