Index: JavaScriptCore/jit/JITPropertyAccess.cpp |
=================================================================== |
--- JavaScriptCore/jit/JITPropertyAccess.cpp (revision 10232) |
+++ JavaScriptCore/jit/JITPropertyAccess.cpp (working copy) |
@@ -305,7 +305,7 @@ |
returnAddress.relinkCallerToFunction(JITStubs::cti_op_get_by_id_array_fail); |
// Check eax is an array |
- Jump failureCases1 = branchPtr(NotEqual, Address(regT0), ImmPtr(m_interpreter->m_jsArrayVptr)); |
+ Jump failureCases1 = branchPtr(NotEqual, Address(regT0), ImmPtr(m_globalData->jsArrayVPtr)); |
// Checks out okay! - get the length from the storage |
loadPtr(Address(regT0, FIELD_OFFSET(JSArray, m_storage)), regT2); |