Changeset 153371 in webkit for trunk/Source/JavaScriptCore/jit/JSInterfaceJIT.h

Timestamp:

Jul 26, 2013, 7:41:55 AM (12 years ago)

Author:

[email protected]

Message:

REGRESSION(FTL): Fix lots of crashes in sh4 baseline JIT.
​https://bugs.webkit.org/show_bug.cgi?id=119148

Patch by Julien Brianceau <​[email protected]> on 2013-07-26
Reviewed by Csaba Osztrogonác.

• jit/JSInterfaceJIT.h: "secondArgumentRegister" is wrong for sh4.
• llint/LowLevelInterpreter32_64.asm: "move t0, a0" is missing

in nativeCallTrampoline for sh4. Reuse MIPS implementation to avoid
code duplication.

File:

• trunk/Source/JavaScriptCore/jit/JSInterfaceJIT.h (modified) (1 diff)

trunk/Source/JavaScriptCore/jit/JSInterfaceJIT.h

@@ -159 +159 @@
         static const RegisterID regT6 = SH4Registers::r6;
         static const RegisterID regT7 = SH4Registers::r7;
-        static const RegisterID firstArgumentRegister =regT4;
-        static const RegisterID secondArgumentRegister =regT4;
+        static const RegisterID firstArgumentRegister = regT4;
+        static const RegisterID secondArgumentRegister = regT5;
 
         static const RegisterID returnValueRegister = SH4Registers::r0;