Changeset 45307 in webkit for trunk/JavaScriptCore/interpreter/Interpreter.cpp

Timestamp:

Jun 26, 2009, 10:15:25 PM (16 years ago)

Author:

[email protected]

Message:

<rdar://problem/7009684> REGRESSION(r45039): Crashes inside JSEvent::put on PowerPC (26746)
<​https://bugs.webkit.org/show_bug.cgi?id=26746>

Reviewed by Dan Bernstein

Fix for r45039 incorrectly uncached a get_by_id by converting it to put_by_id. Clearly this
is less than correct. This patch corrects that error.

File:

• trunk/JavaScriptCore/interpreter/Interpreter.cpp (modified) (1 diff)

trunk/JavaScriptCore/interpreter/Interpreter.cpp

@@ -1086 +1086 @@
     StructureChain* protoChain = structure->prototypeChain(callFrame);
     if (!protoChain->isCacheable()) {
-        vPC[0] = getOpcode(op_put_by_id_generic);
+        vPC[0] = getOpcode(op_get_by_id_generic);
         return;
     }