git://git.webkit.org / WebKit-https.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c7d761a) | patch
LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it meant...
authorfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 18 Jul 2013 22:06:56 +0000 (22:06 +0000)
committerfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 18 Jul 2013 22:06:56 +0000 (22:06 +0000)
commit08c1477b75c161e5796335de919730f669ccb4a4
tree0f0ee52f110b3baebe72b152d4ecc5927fdcd947tree | snapshot
parentc7d761a10142cf2e528a585002ca3d7bc63c41edcommit | diff
LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it meant to store into the value profile
https://bugs.webkit.org/show_bug.cgi?id=118865

Reviewed by Mark Hahnenberg.

* llint/LowLevelInterpreter64.asm:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@152868 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog diff | blob | history
Source/JavaScriptCore/llint/LowLevelInterpreter64.asm diff | blob | history
Mirror of the WebKit open source project from svn.webkit.org.