Closed
Bug 707899
Opened 13 years ago
Closed 13 years ago
IonMonkey: load initialized length from elements vector
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: jandem, Assigned: jandem)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
33.95 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
Now that ObjShrink landed, we have to load the initialized length from the slots vector instead of the object.
Assignee | ||
Comment 1•13 years ago
|
||
This patch adds MElements to read obj->elements. A large part of the patch is renaming "slots" to "elements" for MLoadElement, MStoreElement and MInitializedLength. Now "slots" refers to property slots (obj->slots) and "elements" refers to dense array elements (obj->elements).
Attachment #579266 -
Flags: review?(dvander)
Assignee | ||
Updated•13 years ago
|
Summary: IonMonkey: load initialized length from slots vector → IonMonkey: load initialized length from elements vector
Updated•13 years ago
|
Attachment #579266 -
Flags: review?(dvander) → review+
Assignee | ||
Comment 2•13 years ago
|
||
http://hg.mozilla.org/projects/ionmonkey/rev/87f699a7ab70
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•