Changeset 209678 in webkit for trunk/Source/JavaScriptCore/dfg/DFGMinifiedNode.cpp

Timestamp:

Dec 10, 2016, 5:14:37 PM (8 years ago)

Author:

[email protected]

Message:

Unreviewed, rolling out r209653, r209654, r209663, and
r209673.
​https://bugs.webkit.org/show_bug.cgi?id=165739

speedometer crashes (Requested by pizlo on #webkit).

Reverted changesets:

"JSVALUE64: Pass arguments in platform argument registers when
making JavaScript calls"
​https://bugs.webkit.org/show_bug.cgi?id=160355
​http://trac.webkit.org/changeset/209653

"Unreviewed build fix for 32 bit builds."
​http://trac.webkit.org/changeset/209654

"Unreviewed build fix for the CLOOP after r209653"
​http://trac.webkit.org/changeset/209663

"REGRESSION(r209653) Crash in CallFrameShuffler::snapshot()"
​https://bugs.webkit.org/show_bug.cgi?id=165728
​http://trac.webkit.org/changeset/209673

File:

• trunk/Source/JavaScriptCore/dfg/DFGMinifiedNode.cpp (modified) (2 diffs)

trunk/Source/JavaScriptCore/dfg/DFGMinifiedNode.cpp

@@ -1 +1 @@
 /*
- * Copyright (C) 2012-2016 Apple Inc. All rights reserved.
+ * Copyright (C) 2012-2015 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -42 +42 @@
     if (hasConstant(node->op()))
         result.m_info = JSValue::encode(node->asJSValue());
-    else if (node->op() == GetArgumentRegister)
-        result.m_info = jsFunctionArgumentForArgumentRegisterIndex(node->argumentRegisterIndex());
     else {
         ASSERT(node->op() == PhantomDirectArguments || node->op() == PhantomClonedArguments);