Changeset 155399 in webkit for trunk/Source/JavaScriptCore/jit/JIT.h

Timestamp:

Sep 9, 2013, 4:03:19 PM (12 years ago)

Author:

[email protected]

Message:

Wrong for SlowPathCall to load callFrame reg from vm.topCallFrame after call
​https://bugs.webkit.org/show_bug.cgi?id=120537

Reviewed by Geoffrey Garen.

Changed JITSlowPathCall::call() to update vm.topCallFrame from the callFrameRegister instead of the
other way around.

• jit/JIT.h:
• jit/JITInlines.h:
• jit/SlowPathCall.h:

(JSC::JITSlowPathCall::call):

File:

• trunk/Source/JavaScriptCore/jit/JIT.h (modified) (1 diff)

trunk/Source/JavaScriptCore/jit/JIT.h

@@ -839 +839 @@
         void restoreArgumentReferenceForTrampoline();
         void updateTopCallFrame();
-        void reloadCallFrameFromTopCallFrame();
 
         Call emitNakedCall(CodePtr function = CodePtr());