review.tizen.org Git - platform/upstream/v8.git/commit

Fix xssue 492: ARM debug crash: mozilla/ecma/FunctionObjects/15.3.1.1-3

When the number of parameters times 4 (kPointerSize) to a function cannot be encoded in 12 bits the return sequence gets one more instruction. Changed the assertion to check for this case.

BUG=http://code.google.com/p/v8/issues/detail?id=492
TEST=test/mjsunit/regress/regress-492.js
Review URL: http://codereview.chromium.org/354028

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@3211 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

author	sgjesse@chromium.org <sgjesse@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
	Wed, 4 Nov 2009 10:04:22 +0000 (10:04 +0000)
committer	sgjesse@chromium.org <sgjesse@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
	Wed, 4 Nov 2009 10:04:22 +0000 (10:04 +0000)
commit	54ec6c031a933b2d10334ca6e3a920b758f0c333
tree	9aefe80e1911915f58ff266eb308e949f7170630	tree \| snapshot
parent	ee7bab33a8081d3a4d4fd366b08c4e3fb50fdfe6	commit \| diff

src/arm/assembler-arm.cc		diff \| blob \| history
src/arm/assembler-arm.h		diff \| blob \| history
src/arm/codegen-arm.cc		diff \| blob \| history
test/mjsunit/regress/regress-492.js	[new file with mode: 0644]	blob