Changeset 94688 in webkit for trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
- Timestamp:
- Sep 7, 2011, 10:55:50 AM (14 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
r94629 r94688 1304 1304 // Check that prototype is an object. 1305 1305 m_jit.loadPtr(MacroAssembler::Address(prototypeReg, JSCell::structureOffset()), scratchReg); 1306 speculationCheck(m_jit.branch 8(MacroAssembler::NotEqual, MacroAssembler::Address(scratchReg, Structure::typeInfoTypeOffset()), MacroAssembler::TrustedImm32(ObjectType)));1306 speculationCheck(m_jit.branchIfNotObject(scratchReg)); 1307 1307 1308 1308 // Initialize scratchReg with the value being checked.
Note:
See TracChangeset
for help on using the changeset viewer.