Revision: 2787
Author: [email protected]
Date: Mon Aug 31 08:28:17 2009
Log: X64: Fix bug introduced in revision 2779
Review URL: http://codereview.chromium.org/180040
http://code.google.com/p/v8/source/detail?r=2787
Modified:
/branches/bleeding_edge/src/ia32/ic-ia32.cc
/branches/bleeding_edge/src/x64/ic-x64.cc
=======================================
--- /branches/bleeding_edge/src/ia32/ic-ia32.cc Wed Aug 19 03:18:30 2009
+++ /branches/bleeding_edge/src/ia32/ic-ia32.cc Mon Aug 31 08:28:17 2009
@@ -604,7 +604,7 @@
__ mov(ebx, FieldOperand(edx, HeapObject::kMapOffset));
__ movzx_b(eax, FieldOperand(ebx, Map::kInstanceTypeOffset));
__ cmp(eax, FIRST_JS_OBJECT_TYPE);
- __ j(less, &miss, not_taken);
+ __ j(below, &miss, not_taken);
// If this assert fails, we have to check upper bound too.
ASSERT(LAST_TYPE == JS_FUNCTION_TYPE);
=======================================
--- /branches/bleeding_edge/src/x64/ic-x64.cc Mon Aug 31 01:57:36 2009
+++ /branches/bleeding_edge/src/x64/ic-x64.cc Mon Aug 31 08:28:17 2009
@@ -849,7 +849,7 @@
// Check that the receiver is a valid JS object.
__ CmpObjectType(rax, FIRST_JS_OBJECT_TYPE, rbx);
- __ j(less, &miss);
+ __ j(below, &miss);
// If this assert fails, we have to check upper bound too.
ASSERT(LAST_TYPE == JS_FUNCTION_TYPE);
--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---
