Index: src/ia32/codegen-ia32.cc |
=================================================================== |
--- src/ia32/codegen-ia32.cc (revision 1911) |
+++ src/ia32/codegen-ia32.cc (working copy) |
@@ -7198,6 +7198,8 @@ |
__ TryGetFunctionPrototype(edx, ebx, ecx, &slow); |
// Check that the function prototype is a JS object. |
+ __ test(ebx, Immediate(kSmiTagMask)); |
+ __ j(zero, &slow, not_taken); |
__ mov(ecx, FieldOperand(ebx, HeapObject::kMapOffset)); |
__ movzx_b(ecx, FieldOperand(ecx, Map::kInstanceTypeOffset)); |
__ cmp(ecx, FIRST_JS_OBJECT_TYPE); |