Bugfix in hydrogen array literal code generation.
authormvstanton@chromium.org <mvstanton@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 19 Jun 2013 13:48:50 +0000 (13:48 +0000)
committermvstanton@chromium.org <mvstanton@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 19 Jun 2013 13:48:50 +0000 (13:48 +0000)
commit7f0f0227921b047b7de225232d040f8f6cbe8141
tree2f3c6529e0f9b3781c41987392db1a890a701102
parent010d9aba1616a584ff59d13a47ed78a82d17375b
Bugfix in hydrogen array literal code generation.

If an array literal contains some non-constant elements, is of type SMI, and
then the boilerplate transitions to double or fast sometime after we've
crankshafted the code, then we could incorrectly store smis in double arrays.

BUG=
R=yangguo@chromium.org

Review URL: https://codereview.chromium.org/17334004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@15207 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/hydrogen.cc
test/mjsunit/array-literal-feedback.js [new file with mode: 0644]