DescriptionFix dictionary element load to pass correct elements kind.
Using FAST_SMI_ELEMENTS triggers optimization on 64-bit architectures that load
only the higher 32 bits of the element. If the element is a pointer to undefined
that has 0 in the higher half than it is erroneously treated as SMI 0.
BUG=v8:3158
LOG=N
TEST=mjsunit/sparse-array-reverse,mjsunit/regress/regress-3158.js
R=danno@chromium.org, ishell@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=19387
Patch Set 1 #Patch Set 2 : Add regression test #Patch Set 3 : x64 checks #
Total comments: 4
Patch Set 4 : use ifdef DEBUG #Patch Set 5 : Enable tests #
Messages
Total messages: 7 (0 generated)
|