From e66b179990d07d2315ff40a8fc9ab5d8f41c81a1 Mon Sep 17 00:00:00 2001 From: "jkummerow@chromium.org" Date: Tue, 20 May 2014 17:12:18 +0000 Subject: [PATCH] Disable ArrayShift hydrogen support BUG=chromium:374838 LOG=y R=mstarzinger@chromium.org Review URL: https://codereview.chromium.org/295983003 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21392 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/hydrogen.cc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/hydrogen.cc b/src/hydrogen.cc index b296b93723..40386aaaae 100644 --- a/src/hydrogen.cc +++ b/src/hydrogen.cc @@ -7927,6 +7927,10 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall( return true; } case kArrayShift: { + // Something in here seems to be causing crbug.com/374838. + // TODO(bmeurer): Investigate the problem and re-enable this code. + return false; + if (receiver_map.is_null()) return false; if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false; ElementsKind kind = receiver_map->elements_kind();