Title: [113262] trunk/Source/_javascript_Core
- Revision
- 113262
- Author
- msab...@apple.com
- Date
- 2012-04-04 16:50:53 -0700 (Wed, 04 Apr 2012)
Log Message
Fixed minor error: "& 3" should be "& 2".
Rubber-stamped by Oliver Hunt.
* assembler/MacroAssembler.h:
(JSC::MacroAssembler::additionBlindedConstant):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (113261 => 113262)
--- trunk/Source/_javascript_Core/ChangeLog 2012-04-04 23:28:25 UTC (rev 113261)
+++ trunk/Source/_javascript_Core/ChangeLog 2012-04-04 23:50:53 UTC (rev 113262)
@@ -1,5 +1,14 @@
2012-04-04 Michael Saboff <msab...@apple.com>
+ Fixed minor error: "& 3" should be "& 2".
+
+ Rubber-stamped by Oliver Hunt.
+
+ * assembler/MacroAssembler.h:
+ (JSC::MacroAssembler::additionBlindedConstant):
+
+2012-04-04 Michael Saboff <msab...@apple.com>
+
Constant Blinding for add/sub immediate crashes in ArmV7 when dest is SP
https://bugs.webkit.org/show_bug.cgi?id=83191
Modified: trunk/Source/_javascript_Core/assembler/MacroAssembler.h (113261 => 113262)
--- trunk/Source/_javascript_Core/assembler/MacroAssembler.h 2012-04-04 23:28:25 UTC (rev 113261)
+++ trunk/Source/_javascript_Core/assembler/MacroAssembler.h 2012-04-04 23:50:53 UTC (rev 113262)
@@ -703,7 +703,7 @@
static uint32_t maskTable[4] = { 0xfffffffc, 0xffffffff, 0xfffffffe, 0xffffffff };
uint32_t baseValue = imm.asTrustedImm32().m_value;
- uint32_t key = keyForConstant(baseValue) & maskTable[baseValue & 3];
+ uint32_t key = keyForConstant(baseValue) & maskTable[baseValue & 2];
if (key > baseValue)
key = key - baseValue;
return BlindedImm32(baseValue - key, key);
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
