Changeset 172801 in webkit for trunk/Source/JavaScriptCore/bytecode

Timestamp:

Aug 20, 2014, 11:11:15 AM (11 years ago)

Author:

[email protected]

Message:

[Win] Assertion fails when running JSC stress tests.
​https://bugs.webkit.org/show_bug.cgi?id=136103

Patch by ​[email protected] <​[email protected]> on 2014-08-20
Reviewed by Darin Adler.

Use unsigned bitfield member instead of enum bitfield member to avoid negative values.

• bytecode/CodeOrigin.h: Use unsigned bitfield member.

(JSC::InlineCallFrame::specializationKind): Compile fix.

File:

• trunk/Source/JavaScriptCore/bytecode/CodeOrigin.h (modified) (2 diffs)

trunk/Source/JavaScriptCore/bytecode/CodeOrigin.h

@@ -161 +161 @@
     BitVector capturedVars; // Indexed by the machine call frame's variable numbering.
     signed stackOffset : 30;
-    Kind kind : 2;
+    unsigned kind : 2; // real type is Kind
     bool isClosureCall : 1; // If false then we know that callee/scope are constants and the DFG won't treat them as variables, i.e. they have to be recovered manually.
     VirtualRegister argumentsRegister; // This is only set if the code uses arguments. The unmodified arguments register follows the unmodifiedArgumentsRegister() convention (see CodeBlock.h).
@@ -175 +175 @@
     }
     
-    CodeSpecializationKind specializationKind() const { return specializationKindFor(kind); }
+    CodeSpecializationKind specializationKind() const { return specializationKindFor(static_cast<Kind>(kind)); }
 
     JSFunction* calleeConstant() const