Commit 6cf9e8e6 authored by fpizlo@apple.com's avatar fpizlo@apple.com
Browse files

DFG speculative JIT does not initialize integer tags for PredictInt32 temporaries

https://bugs.webkit.org/show_bug.cgi?id=67840

Reviewed by Gavin Barraclough.

* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::initializeVariableTypes):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@94801 268f45cc-cd09-0410-ab3c-d52691b4dbfc
parent 179fafe0
2011-09-08 Filip Pizlo <fpizlo@apple.com>
DFG speculative JIT does not initialize integer tags for PredictInt32 temporaries
https://bugs.webkit.org/show_bug.cgi?id=67840
Reviewed by Gavin Barraclough.
* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::initializeVariableTypes):
2011-09-08 Thouraya ANDOLSI <thouraya.andolsi@st.com>
 
https://bugs.webkit.org/show_bug.cgi?id=67771
......
......@@ -1431,7 +1431,7 @@ void SpeculativeJIT::checkArgumentTypes()
void SpeculativeJIT::initializeVariableTypes()
{
ASSERT(!m_compileIndex);
for (int var = 0; var < m_jit.codeBlock()->m_numVars; ++var) {
for (int var = 0; var < (int)m_jit.graph().predictions().numberOfVariables(); ++var) {
if (isInt32Prediction(m_jit.graph().getPrediction(var)))
m_jit.storePtr(GPRInfo::tagTypeNumberRegister, JITCompiler::addressFor((VirtualRegister)var));
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment