Closed Bug 707899 Opened 13 years ago Closed 13 years ago

IonMonkey: load initialized length from elements vector

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: jandem)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Now that ObjShrink landed, we have to load the initialized length from the slots vector instead of the object.
Attached patch PatchSplinter Review
This patch adds MElements to read obj->elements. A large part of the patch is renaming "slots" to "elements" for MLoadElement, MStoreElement and MInitializedLength. Now "slots" refers to property slots (obj->slots) and "elements" refers to dense array elements (obj->elements).
Attachment #579266 - Flags: review?(dvander)
Summary: IonMonkey: load initialized length from slots vector → IonMonkey: load initialized length from elements vector
Attachment #579266 - Flags: review?(dvander) → review+
http://hg.mozilla.org/projects/ionmonkey/rev/87f699a7ab70
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.