Fixed type feedback in presence of negative lookups.
authorsvenpanne@chromium.org <svenpanne@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 18 Jul 2013 09:12:44 +0000 (09:12 +0000)
committersvenpanne@chromium.org <svenpanne@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 18 Jul 2013 09:12:44 +0000 (09:12 +0000)
commitb951f03cee5506377e84a33de7b79608ade323bb
tree81b88e6bd8a8668da590f0278cc8e47404f6ea65
parentced115b6aea24d53e30979a98ab244878a7a550a
Fixed type feedback in presence of negative lookups.

To fix the issue at hand regarding constant function calls and perhaps
other hidden issues regarding negative lookups, we basically add a
"marker instruction", just for harvesting purposes. Our type feedback
oracle is really, really fragile, we should better switch to some more
explicit and robust scheme soon.

BUG=chromium:252797
R=mstarzinger@chromium.org

Review URL: https://codereview.chromium.org/19588002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@15741 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/arm/stub-cache-arm.cc
src/ia32/stub-cache-ia32.cc
src/mips/stub-cache-mips.cc
src/x64/stub-cache-x64.cc
test/mjsunit/regress/regress-252797.js [new file with mode: 0644]