projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a071b4e) | patch
Fix polymorphic load on named fields.
authormstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 27 Mar 2012 10:42:38 +0000 (10:42 +0000)
committermstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 27 Mar 2012 10:42:38 +0000 (10:42 +0000)
commit057371da13212d91442e79f817ce8a75819f446d
treec7b19b0d228bc42e254272de1736b59d77cf653ftree | snapshot
parenta071b4e04b106d0b930a244ab634a7214611507dcommit | diff
Fix polymorphic load on named fields.

This fixes polymorphic loads to correctly compare in-object offsets
instead of indices, because indices might coincide even though the
actual slot is different because of different instance sizes.

R=danno@chromium.org
BUG=v8:2030
TEST=mjsunit/regress/regress-2030,mjsunit/mirror-array

Review URL: https://chromiumcodereview.appspot.com/9864028

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11153 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/hydrogen.cc diff | blob | history
test/mjsunit/regress/regress-2030.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;