Fix bug in binary operations code. When loading a 32-bit integer as a...

src/ia32/codegen-ia32.cc

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 1348 matching lines @@
   __ AllocateHeapNumber(left_, right_, no_reg, &after_alloc_failure2);
   __ bind(&allocation_ok);
   if (CpuFeatures::IsSupported(SSE2) && op_ != Token::SHR) {
     CpuFeatures::Scope use_sse2(SSE2);
     ASSERT(Token::IsBitOp(op_));
     // Signed conversion.
     __ cvtsi2sd(xmm0, Operand(dst_));
     __ movdbl(FieldOperand(left_, HeapNumber::kValueOffset), xmm0);
   } else {
     if (op_ == Token::SHR) {
+      __ push(Immediate(0));  // High word of unsigned value.
       __ push(dst_);
-      __ push(Immediate(0));  // High word of unsigned value.
       __ fild_d(Operand(esp, 0));
       __ Drop(2);
     } else {
       ASSERT(Token::IsBitOp(op_));
       __ push(dst_);
       __ fild_s(Operand(esp, 0));  // Signed conversion.
       __ pop(dst_);
     }
     __ fstp_d(FieldOperand(left_, HeapNumber::kValueOffset));
   }
@@ skipping 12880 matching lines @@
   masm.GetCode(&desc);
   // Call the function from C++.
   return FUNCTION_CAST<MemCopyFunction>(buffer);
 }
 
 #undef __
 
 } }  // namespace v8::internal
 
 #endif  // V8_TARGET_ARCH_IA32