The default bug view has changed. See this FAQ.

IonMonkey: load initialized length from elements vector

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: jandem, Assigned: jandem)

Tracking

(Blocks: 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
Now that ObjShrink landed, we have to load the initialized length from the slots vector instead of the object.
(Assignee)

Comment 1

5 years ago
Created attachment 579266 [details] [diff] [review]
Patch

This patch adds MElements to read obj->elements. A large part of the patch is renaming "slots" to "elements" for MLoadElement, MStoreElement and MInitializedLength. Now "slots" refers to property slots (obj->slots) and "elements" refers to dense array elements (obj->elements).
Attachment #579266 - Flags: review?(dvander)
(Assignee)

Updated

5 years ago
Summary: IonMonkey: load initialized length from slots vector → IonMonkey: load initialized length from elements vector
Attachment #579266 - Flags: review?(dvander) → review+
(Assignee)

Comment 2

5 years ago
http://hg.mozilla.org/projects/ionmonkey/rev/87f699a7ab70
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.