Ignore:
Timestamp:
Jun 11, 2008, 5:33:48 PM (17 years ago)
Author:
[email protected]
Message:

2008-06-11 Cameron Zwarich <[email protected]>

Reviewed by Maciej.

Bug 19498: REGRESSION (r34497): crash while loading GMail
<https://bugs.webkit.org/show_bug.cgi?id=19498>

JavaScriptCore:

  • VM/CodeGenerator.cpp: (KJS::CodeGenerator::emitJumpIfTrueOptimized): (KJS::CodeGenerator::emitJumpIfTrue):
  • VM/CodeGenerator.h:
  • kjs/nodes.cpp: (KJS::DoWhileNode::emitCode): (KJS::WhileNode::emitCode): (KJS::ForNode::emitCode): (KJS::CaseBlockNode::emitCodeForBlock):

LayoutTests:

  • fast/js/logical-or-jless-expected.txt: Added.
  • fast/js/logical-or-jless.html: Added.
  • fast/js/resources/logical-or-jless.js: Added.
File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/JavaScriptCore/VM/CodeGenerator.h

    r34497 r34500  
    261261        PassRefPtr<LabelID> emitLabel(LabelID*);
    262262        PassRefPtr<LabelID> emitJump(LabelID* target);
     263        PassRefPtr<LabelID> emitJumpIfTrueMayCombine(RegisterID* cond, LabelID* target);
    263264        PassRefPtr<LabelID> emitJumpIfTrue(RegisterID* cond, LabelID* target);
    264265        PassRefPtr<LabelID> emitJumpIfFalse(RegisterID* cond, LabelID* target);
Note: See TracChangeset for help on using the changeset viewer.