From: danno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Date: Fri, 4 May 2012 09:07:22 +0000 (+0000)
Subject: MIPS: ARM: Ensure reload of elements pointer in StoreFastDoubleElement stub
X-Git-Tag: upstream/4.7.83~16750
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=9f75aa3d7ba176d36270c3255bdb248fe79f309b;p=platform%2Fupstream%2Fv8.git

MIPS: ARM: Ensure reload of elements pointer in StoreFastDoubleElement stub

Port r11483 (c291e80e)

BUG=
TEST=

Review URL: https://chromiumcodereview.appspot.com/10348016
Patch from Akos Palfi <palfia@homejinni.com>.

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11507 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
---

diff --git a/src/mips/stub-cache-mips.cc b/src/mips/stub-cache-mips.cc
index 64499ac..18a5f5f 100644
--- a/src/mips/stub-cache-mips.cc
+++ b/src/mips/stub-cache-mips.cc
@@ -4544,6 +4544,8 @@ void KeyedStoreStubCompiler::GenerateStoreFastDoubleElement(
     // Increment the length of the array.
     __ li(length_reg, Operand(Smi::FromInt(1)));
     __ sw(length_reg, FieldMemOperand(receiver_reg, JSArray::kLengthOffset));
+    __ lw(elements_reg,
+          FieldMemOperand(receiver_reg, JSObject::kElementsOffset));
     __ jmp(&finish_store);
 
     __ bind(&check_capacity);