From 67b42cdad8ba869cdab9270dc88361a732ba038d Mon Sep 17 00:00:00 2001
From: "sgjesse@chromium.org"
 <sgjesse@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Date: Fri, 13 Aug 2010 11:18:16 +0000
Subject: [PATCH] ARM: Fix bug in r5252 Review URL:
 http://codereview.chromium.org/3123013

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@5262 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
---
 src/arm/codegen-arm.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/arm/codegen-arm.cc b/src/arm/codegen-arm.cc
index a7e4c0475a..214b3bc434 100644
--- a/src/arm/codegen-arm.cc
+++ b/src/arm/codegen-arm.cc
@@ -4828,7 +4828,7 @@ class DeferredIsStringWrapperSafeForDefaultValueOf : public DeferredCode {
     // Calculate location of the first key name.
     __ add(map_result_,
            map_result_,
-           Operand(FixedArray::kHeaderSize +
+           Operand(FixedArray::kHeaderSize - kHeapObjectTag +
                    DescriptorArray::kFirstIndex * kPointerSize));
     // Loop through all the keys in the descriptor array. If one of these is the
     // symbol valueOf the result is false.