LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it meant...
authorfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 18 Jul 2013 22:06:56 +0000 (22:06 +0000)
committerfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 18 Jul 2013 22:06:56 +0000 (22:06 +0000)
commit08c1477b75c161e5796335de919730f669ccb4a4
tree0f0ee52f110b3baebe72b152d4ecc5927fdcd947
parentc7d761a10142cf2e528a585002ca3d7bc63c41ed
LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it meant to store into the value profile
https://bugs.webkit.org/show_bug.cgi?id=118865

Reviewed by Mark Hahnenberg.

* llint/LowLevelInterpreter64.asm:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@152868 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/llint/LowLevelInterpreter64.asm