Title: [129292] trunk/Source/_javascript_Core
Revision
129292
Author
[email protected]
Date
2012-09-21 19:06:25 -0700 (Fri, 21 Sep 2012)

Log Message

Eeeep - broke early boyer in bug#97382
https://bugs.webkit.org/show_bug.cgi?id=97383

Rubber stamped by Sam Weinig.

missed a child3 -> child2!

* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::compileInstanceOf):

Modified Paths

Diff

Modified: trunk/Source/_javascript_Core/ChangeLog (129291 => 129292)


--- trunk/Source/_javascript_Core/ChangeLog	2012-09-22 01:50:32 UTC (rev 129291)
+++ trunk/Source/_javascript_Core/ChangeLog	2012-09-22 02:06:25 UTC (rev 129292)
@@ -1,5 +1,17 @@
 2012-09-21  Gavin Barraclough  <[email protected]>
 
+        Eeeep - broke early boyer in bug#97382
+        https://bugs.webkit.org/show_bug.cgi?id=97383
+
+        Rubber stamped by Sam Weinig.
+
+        missed a child3 -> child2!
+
+        * dfg/DFGSpeculativeJIT.cpp:
+        (JSC::DFG::SpeculativeJIT::compileInstanceOf):
+
+2012-09-21  Gavin Barraclough  <[email protected]>
+
         Unreviewed windows build fix.
 
         * _javascript_Core.vcproj/_javascript_Core/_javascript_Core.def:

Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp (129291 => 129292)


--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp	2012-09-22 01:50:32 UTC (rev 129291)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.cpp	2012-09-22 02:06:25 UTC (rev 129292)
@@ -2382,7 +2382,7 @@
         // from speculating any more aggressively than we absolutely need to.
         
         JSValueOperand value(this, node.child1());
-        SpeculateCellOperand prototype(this, node.child3());
+        SpeculateCellOperand prototype(this, node.child2());
         GPRTemporary scratch(this);
         
         GPRReg prototypeReg = prototype.gpr();
_______________________________________________
webkit-changes mailing list
[email protected]
http://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to