|
Reland "Turn ElementsTransitionAndStore stub into a HydrogenCodeStub".
Fix the invalid array length check, replacing it with a check of
the elements pointer similar to TransitionElementsKindStub.
Refactor common code from ElementsTransitionAndStoreStub and TransitionElementsKindStub into BuildTransitionElementsKind() helper method.
Add test case for the MD5 computation that used to crash before,
and a small test case for the specific issue.
R=danno@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=15713
|
Unified diffs |
Side-by-side diffs |
Delta from patch set |
Stats (+471 lines, -47 lines) |
Patch |
|
M |
src/arm/code-stubs-arm.cc
|
View
|
|
1 chunk |
+11 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/code-stubs.h
|
View
|
1
2
|
2 chunks |
+51 lines, -5 lines |
0 comments
|
Download
|
|
M |
src/code-stubs.cc
|
View
|
1
2
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
|
M |
src/code-stubs-hydrogen.cc
|
View
|
1
|
2 chunks |
+41 lines, -35 lines |
0 comments
|
Download
|
|
M |
src/hydrogen.h
|
View
|
1
|
1 chunk |
+6 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/hydrogen.cc
|
View
|
1
|
1 chunk |
+42 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/ia32/code-stubs-ia32.cc
|
View
|
|
1 chunk |
+11 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/ic.h
|
View
|
|
1 chunk |
+1 line, -0 lines |
0 comments
|
Download
|
|
M |
src/ic.cc
|
View
|
1
|
1 chunk |
+18 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/mips/code-stubs-mips.cc
|
View
|
|
1 chunk |
+11 lines, -0 lines |
0 comments
|
Download
|
|
M |
src/stub-cache.cc
|
View
|
1
2
|
1 chunk |
+15 lines, -6 lines |
0 comments
|
Download
|
|
M |
src/x64/code-stubs-x64.cc
|
View
|
|
1 chunk |
+11 lines, -0 lines |
0 comments
|
Download
|
|
A |
test/mjsunit/elements-transition-and-store.js
|
View
|
1
2
3
|
1 chunk |
+41 lines, -0 lines |
0 comments
|
Download
|
|
A |
test/mjsunit/md5.js
|
View
|
1
2
3
|
1 chunk |
+211 lines, -0 lines |
0 comments
|
Download
|
Total messages: 7 (0 generated)
|