PJS: Add TypedArray .length stub for GetPropertyIC

RESOLVED FIXED in mozilla25

Status

()

RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: shu, Assigned: shu)

Tracking

unspecified
mozilla25
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

Comment hidden (empty)
(Assignee)

Comment 1

5 years ago
Created attachment 779805 [details] [diff] [review]
patch
Assignee: general → shu
Attachment #779805 - Flags: review?(jdemooij)
Comment on attachment 779805 [details] [diff] [review]
patch

Review of attachment 779805 [details] [diff] [review]:
-----------------------------------------------------------------

::: js/src/ion/IonCaches.cpp
@@ +1063,5 @@
> +    Register tmpReg;
> +    if (output.hasValue()) {
> +        tmpReg = output.valueReg().scratchReg();
> +    } else {
> +        JS_ASSERT(output.type() == MIRType_Int32);

The sequential IC checks

"cache.output().type() != MIRType_Value && cache.output().type() != MIRType_Int32"

and does not attach a stub in that case. Don't we need that check for the parallel IC too?
Attachment #779805 - Flags: review?(jdemooij) → review+
(Assignee)

Comment 3

5 years ago
(In reply to Jan de Mooij [:jandem] from comment #2)
> Comment on attachment 779805 [details] [diff] [review]
> patch
> 
> Review of attachment 779805 [details] [diff] [review]:
> -----------------------------------------------------------------
> 
> ::: js/src/ion/IonCaches.cpp
> @@ +1063,5 @@
> > +    Register tmpReg;
> > +    if (output.hasValue()) {
> > +        tmpReg = output.valueReg().scratchReg();
> > +    } else {
> > +        JS_ASSERT(output.type() == MIRType_Int32);
> 
> The sequential IC checks
> 
> "cache.output().type() != MIRType_Value && cache.output().type() !=
> MIRType_Int32"
> 
> and does not attach a stub in that case. Don't we need that check for the
> parallel IC too?

Ah, good catch. I missed that when copying.
https://hg.mozilla.org/mozilla-central/rev/bf069935cd61
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla25
You need to log in before you can comment on or make changes to this bug.