Revision: 20280
Author: [email protected]
Date: Wed Mar 26 13:14:08 2014 UTC
Log: Fix missing representation for the result of HIsSmiAndBranch.
[email protected]
BUG=
Review URL: https://codereview.chromium.org/211273010
http://code.google.com/p/v8/source/detail?r=20280
Added:
/branches/bleeding_edge/test/mjsunit/regress/regress-is-smi-repr.js
Modified:
/branches/bleeding_edge/src/hydrogen-instructions.h
=======================================
--- /dev/null
+++ /branches/bleeding_edge/test/mjsunit/regress/regress-is-smi-repr.js Wed
Mar 26 13:14:08 2014 UTC
@@ -0,0 +1,18 @@
+// Copyright 2014 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+"use strict";
+
+var global;
+
+function g() { global = this; }
+Object.defineProperty(Number.prototype, "prop", { get: g });
+function f(s) { s.prop; }
+
+f(1);
+f(1);
+%OptimizeFunctionOnNextCall(f);
+f(1);
=======================================
--- /branches/bleeding_edge/src/hydrogen-instructions.h Tue Mar 25 09:06:16
2014 UTC
+++ /branches/bleeding_edge/src/hydrogen-instructions.h Wed Mar 26 13:14:08
2014 UTC
@@ -4403,7 +4403,9 @@
HIsSmiAndBranch(HValue* value,
HBasicBlock* true_target = NULL,
HBasicBlock* false_target = NULL)
- : HUnaryControlInstruction(value, true_target, false_target) {}
+ : HUnaryControlInstruction(value, true_target, false_target) {
+ set_representation(Representation::Tagged());
+ }
};
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.