Description[turbofan] Correctify typed lowering.
We cannot add new JSToNumber nodes here in general, because:
a) The inserted ToNumber operation screws up observability of valueOf.
b) Deoptimization at ToNumber doesn't have corresponding bailout id.
TEST=cctest,mjsunit
R=jarin@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=24660
Patch Set 1 #Patch Set 2 : Correctification #Patch Set 3 : REBASE #
Messages
Total messages: 3 (0 generated)
|