AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

Disable ArrayShift hydrogen support

Browse Source 
BUG=chromium:374838
LOG=y
R=mstarzinger@chromium.org

Review URL: https://codereview.chromium.org/295983003

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21392 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
This commit is contained in:
jkummerow@chromium.org 2014-05-20 17:12:18 +00:00
parent 7e1c789685
commit e66b179990
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/hydrogen.cc
View File

@ -7927,6 +7927,10 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
return true; return true;
} }
case kArrayShift: { case kArrayShift: {
// Something in here seems to be causing crbug.com/374838.
// TODO(bmeurer): Investigate the problem and re-enable this code.
return false;
if (receiver_map.is_null()) return false; if (receiver_map.is_null()) return false;
if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false; if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
ElementsKind kind = receiver_map->elements_kind(); ElementsKind kind = receiver_map->elements_kind();