Title: [164445] trunk/Source/_javascript_Core
- Revision
- 164445
- Author
- [email protected]
- Date
- 2014-02-20 14:07:13 -0800 (Thu, 20 Feb 2014)
Log Message
REGRESSION (r164417): ASSERTION FAILED: isBranch() in X86 32 bit build
https://bugs.webkit.org/show_bug.cgi?id=129118
Reviewed by Filip Pizlo.
Changed 32 bit version of SpeculativeJIT::compile handling of Jump nodes to match
what is in the 64 bit build.
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::compile):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (164444 => 164445)
--- trunk/Source/_javascript_Core/ChangeLog 2014-02-20 21:29:37 UTC (rev 164444)
+++ trunk/Source/_javascript_Core/ChangeLog 2014-02-20 22:07:13 UTC (rev 164445)
@@ -1,3 +1,16 @@
+2014-02-20 Michael Saboff <[email protected]>
+
+ REGRESSION (r164417): ASSERTION FAILED: isBranch() in X86 32 bit build
+ https://bugs.webkit.org/show_bug.cgi?id=129118
+
+ Reviewed by Filip Pizlo.
+
+ Changed 32 bit version of SpeculativeJIT::compile handling of Jump nodes to match
+ what is in the 64 bit build.
+
+ * dfg/DFGSpeculativeJIT32_64.cpp:
+ (JSC::DFG::SpeculativeJIT::compile):
+
2014-02-20 Zan Dobersek <[email protected]>
[Automake] Collect the _javascript_ files required for JSC builtins through a wildcard
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp (164444 => 164445)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2014-02-20 21:29:37 UTC (rev 164444)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT32_64.cpp 2014-02-20 22:07:13 UTC (rev 164445)
@@ -3009,7 +3009,7 @@
}
case DFG::Jump: {
- jump(node->branchData()->taken.block);
+ jump(node->targetBlock());
noResult(node);
break;
}
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
