зеркало из https://github.com/mozilla/gecko-dev.git
Bug 1247832 - Adjust framePushed value in unboxed array baseline IC failure path, r=jandem.
This commit is contained in:
Родитель
4dcfda62de
Коммит
91809911f5
|
@ -3103,6 +3103,8 @@ ICSetElemDenseOrUnboxedArrayAddCompiler::generateStubCode(MacroAssembler& masm)
|
|||
// But R0 and R1 still hold their values.
|
||||
EmitStowICValues(masm, 2);
|
||||
|
||||
uint32_t framePushedAfterStow = masm.framePushed();
|
||||
|
||||
// We may need to free up some registers.
|
||||
regs = availableGeneralRegs(0);
|
||||
regs.take(R0);
|
||||
|
@ -3264,6 +3266,7 @@ ICSetElemDenseOrUnboxedArrayAddCompiler::generateStubCode(MacroAssembler& masm)
|
|||
|
||||
// Failure case - fail but first unstow R0 and R1
|
||||
masm.bind(&failureUnstow);
|
||||
masm.setFramePushed(framePushedAfterStow);
|
||||
EmitUnstowICValues(masm, 2);
|
||||
|
||||
// Failure case - jump to next stub
|
||||
|
|
Загрузка…
Ссылка в новой задаче