Changeset 65847 in webkit for trunk/JavaScriptCore/interpreter/Interpreter.cpp

Timestamp:

Aug 23, 2010, 5:04:01 PM (15 years ago)

Author:

[email protected]

Message:

2010-08-23 Oliver Hunt <​[email protected]>

Reviewed by Darin Adler.

[REGRESSION] Interpreter incorrectly excludes prototype chain when validating put_by_id_transition
​https://bugs.webkit.org/show_bug.cgi?id=44240
<rdar://problem/8328995>

Fix an error I introduced when cleaning up the interpreter side of the logic
to prevent setters being called in object initialisers.

• interpreter/Interpreter.cpp: (JSC::Interpreter::privateExecute):

File:

• trunk/JavaScriptCore/interpreter/Interpreter.cpp (modified) (1 diff)

trunk/JavaScriptCore/interpreter/Interpreter.cpp

@@ -2953 +2953 @@
                 int direct = vPC[8].u.operand;
                 
-                if (direct) {
+                if (!direct) {
                     RefPtr<Structure>* it = vPC[6].u.structureChain->head();