Changeset 37453 in webkit for trunk/JavaScriptCore/masm

Timestamp:

Oct 9, 2008, 4:59:26 PM (17 years ago)

Author:

[email protected]

Message:

JavaScriptCore:

2008-10-09 Gavin Barraclough <​[email protected]>

Reviewed by Cameron Zwarich.

Fix for bug #21160, x=0;1/(x*-1) == -Infinity

• ChangeLog:
• VM/CTI.cpp: (JSC::CTI::emitFastArithDeTagImmediate): (JSC::CTI::emitFastArithDeTagImmediateJumpIfZero): (JSC::CTI::compileBinaryArithOp): (JSC::CTI::compileBinaryArithOpSlowCase): (JSC::CTI::privateCompileMainPass): (JSC::CTI::privateCompileSlowCases):
• VM/CTI.h:
• masm/X86Assembler.h: (JSC::X86Assembler::): (JSC::X86Assembler::emitUnlinkedJs):

LayoutTests:

2008-10-09 Gavin Barraclough <​[email protected]>

Reviewed by Cameron Zwarich.

Correct results for -0 cases.

• fast/js/math-transforms-expected.txt:

File:

• trunk/JavaScriptCore/masm/X86Assembler.h (modified) (2 diffs)

trunk/JavaScriptCore/masm/X86Assembler.h

@@ -236 +236 @@
         OP2_JBE_rel32       = 0x86,
         OP2_JA_rel32        = 0x87,
+        OP2_JS_rel32        = 0x88,
         OP2_JP_rel32        = 0x8A,
         OP2_JL_rel32        = 0x8C,
@@ -974 +975 @@
         m_buffer->putByte(OP_2BYTE_ESCAPE);
         m_buffer->putByte(OP2_JP_rel32);
+        m_buffer->putInt(0);
+        return JmpSrc(m_buffer->getOffset());
+    }
+    
+    JmpSrc emitUnlinkedJs()
+    {
+        m_buffer->putByte(OP_2BYTE_ESCAPE);
+        m_buffer->putByte(OP2_JS_rel32);
         m_buffer->putInt(0);
         return JmpSrc(m_buffer->getOffset());