Description[ic] Use the CallFunction builtin to invoke accessors.
The HandlerCompiler did not properly handle the weird edge case when a
sloppy mode function was installed as an accessor on one of the value
wrapper prototypes and then accessed via a load from a primitive value.
In this case we just passed the primitive value untouched instead of
properly wrapping it first. The CallFunction builtin properly deals with
all the funny edge cases, so we use it instead of duplicating almost all
of the logic here (the performance difference is neglible).
R=verwaest@chromium.org
BUG=chromium:599073, v8:4413
LOG=n
Committed: https://crrev.com/6df9a22c3f8d6640e867ca659c95e22289b00b40
Cr-Commit-Position: refs/heads/master@{#35187}
Patch Set 1 #Patch Set 2 : Fix typo on ia32. #Patch Set 3 : Now for real. #Patch Set 4 : mips64 fix #
Messages
Total messages: 11 (5 generated)
|