| Index: JavaScriptCore/jit/JITPropertyAccess.cpp
|
| ===================================================================
|
| --- JavaScriptCore/jit/JITPropertyAccess.cpp (revision 10232)
|
| +++ JavaScriptCore/jit/JITPropertyAccess.cpp (working copy)
|
| @@ -305,7 +305,7 @@
|
| returnAddress.relinkCallerToFunction(JITStubs::cti_op_get_by_id_array_fail);
|
|
|
| // Check eax is an array
|
| - Jump failureCases1 = branchPtr(NotEqual, Address(regT0), ImmPtr(m_interpreter->m_jsArrayVptr));
|
| + Jump failureCases1 = branchPtr(NotEqual, Address(regT0), ImmPtr(m_globalData->jsArrayVPtr));
|
|
|
| // Checks out okay! - get the length from the storage
|
| loadPtr(Address(regT0, FIELD_OFFSET(JSArray, m_storage)), regT2);
|
|
|