Index: src/crankshaft/mips/lithium-codegen-mips.cc |
diff --git a/src/crankshaft/mips/lithium-codegen-mips.cc b/src/crankshaft/mips/lithium-codegen-mips.cc |
index a82b262dbbbb86c172ec81cdb8bfb5672ef11528..fe0c1880ad66f84b8a1673ef33c41eb37af2653f 100644 |
--- a/src/crankshaft/mips/lithium-codegen-mips.cc |
+++ b/src/crankshaft/mips/lithium-codegen-mips.cc |
@@ -3364,7 +3364,8 @@ void LCodeGen::CallKnownFunction(Handle<JSFunction> function, |
// Change context. |
__ lw(cp, FieldMemOperand(function_reg, JSFunction::kContextOffset)); |
- // Always initialize a0 to the number of actual arguments. |
+ // Always initialize new target and number of actual arguments. |
+ __ LoadRoot(a3, Heap::kUndefinedValueRootIndex); |
__ li(a0, Operand(arity)); |
// Invoke function. |
@@ -3772,11 +3773,13 @@ void LCodeGen::DoCallJSFunction(LCallJSFunction* instr) { |
DCHECK(ToRegister(instr->function()).is(a1)); |
DCHECK(ToRegister(instr->result()).is(v0)); |
- __ li(a0, Operand(instr->arity())); |
- |
// Change context. |
__ lw(cp, FieldMemOperand(a1, JSFunction::kContextOffset)); |
+ // Always initialize new target and number of actual arguments. |
+ __ LoadRoot(a3, Heap::kUndefinedValueRootIndex); |
+ __ li(a0, Operand(instr->arity())); |
+ |
// Load the code entry address |
__ lw(at, FieldMemOperand(a1, JSFunction::kCodeEntryOffset)); |
__ Call(at); |