From afdd23dc14502d82e4c46d5b35e37e4a200e39c7 Mon Sep 17 00:00:00 2001
From: Brian Hackett <bhackett1024@gmail.com>
Date: Wed, 29 May 2013 08:57:02 -0600
Subject: [PATCH] Bug 875476 - Avoid passing operands of the wrong type to
 EvaluateConstantOperands, r=jandem.

---
 js/src/ion/MIR.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/src/ion/MIR.cpp b/js/src/ion/MIR.cpp
index 5fbb4a68bf02..51f0729d49fd 100644
--- a/js/src/ion/MIR.cpp
+++ b/js/src/ion/MIR.cpp
@@ -1283,7 +1283,7 @@ MBinaryArithInstruction::infer(BaselineInspector *inspector,
 
     // If the operation will always overflow on its constant operands, use a
     // double specialization so that it can be constant folded later.
-    if (isMul() || isDiv()) {
+    if ((isMul() || isDiv()) && lhs == MIRType_Int32 && rhs == MIRType_Int32) {
         bool typeChange = false;
         EvaluateConstantOperands(this, &typeChange);
         if (typeChange)