<rdar://problem/9366557> Various crashes due to bad DFG codegen at canalplus.fr
authorggaren@apple.com <ggaren@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 4 May 2011 18:56:30 +0000 (18:56 +0000)
committerggaren@apple.com <ggaren@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 4 May 2011 18:56:30 +0000 (18:56 +0000)
commit45027ef5d9d091cdd523f64905691283ba7963e4
tree55a9538871ddbda488705c827cd2bb1d5be429bf
parentd7f5ff47b7d7c6340e2c9b12c456747135609f4c
<rdar://problem/9366557> Various crashes due to bad DFG codegen at canalplus.fr

Reviewed by Darin Adler.

Source/JavaScriptCore:

* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::checkArgumentTypes): Removed a stray line of
code that accidentally survived the conversion to a switch statement,
causing a lot of important code not to run most of the time.

Since this is not a trivial finger-picking mistake, I will not call it a
typo.

LayoutTests:

* fast/js/trivial-functions-expected.txt: Added.
* fast/js/trivial-functions.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@85771 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/js/trivial-functions-expected.txt [new file with mode: 0644]
LayoutTests/fast/js/trivial-functions.html [new file with mode: 0644]
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp