diff --git a/src/compiler/x64/code-generator-x64.cc b/src/compiler/x64/code-generator-x64.cc index 40f3247fd4..0480f9dc90 100644 --- a/src/compiler/x64/code-generator-x64.cc +++ b/src/compiler/x64/code-generator-x64.cc @@ -354,12 +354,15 @@ class OutOfLineTruncateDoubleToI FINAL : public OutOfLineCode { length_(length) {} \ \ void Generate() FINAL { \ + Label oob; \ __ leal(kScratchRegister, Operand(index1_, index2_)); \ - __ xorl(result_, result_); \ __ cmpl(kScratchRegister, Immediate(length_)); \ - __ j(above_equal, exit()); \ + __ j(above_equal, &oob, Label::kNear); \ __ asm_instr(result_, \ Operand(buffer_, kScratchRegister, times_1, 0)); \ + __ jmp(exit()); \ + __ bind(&oob); \ + __ xorl(result_, result_); \ } \ \ private: \ diff --git a/test/mjsunit/compiler/regress-445858.js b/test/mjsunit/compiler/regress-445858.js new file mode 100644 index 0000000000..b2214ea0f2 --- /dev/null +++ b/test/mjsunit/compiler/regress-445858.js @@ -0,0 +1,15 @@ +// Copyright 2014 the V8 project authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +var foo = (function module(stdlib, foreign, heap) { + "use asm"; + var MEM = new stdlib.Int8Array(heap); + function foo(i) { + i = i|0; + i[0] = i; + return MEM[i + 1 >> 0]|0; + } + return { foo: foo }; +})(this, {}, new ArrayBuffer(64 * 1024)).foo; +foo(-1);