diff --git a/src/ia32/ic-ia32.cc b/src/ia32/ic-ia32.cc index fa9b8a20f6..e39808b2ee 100644 --- a/src/ia32/ic-ia32.cc +++ b/src/ia32/ic-ia32.cc @@ -604,7 +604,7 @@ void CallIC::GenerateNormal(MacroAssembler* masm, int argc) { __ mov(ebx, FieldOperand(edx, HeapObject::kMapOffset)); __ movzx_b(eax, FieldOperand(ebx, Map::kInstanceTypeOffset)); __ cmp(eax, FIRST_JS_OBJECT_TYPE); - __ j(less, &miss, not_taken); + __ j(below, &miss, not_taken); // If this assert fails, we have to check upper bound too. ASSERT(LAST_TYPE == JS_FUNCTION_TYPE); diff --git a/src/x64/ic-x64.cc b/src/x64/ic-x64.cc index 29ea84605a..e2f7c30d27 100644 --- a/src/x64/ic-x64.cc +++ b/src/x64/ic-x64.cc @@ -849,7 +849,7 @@ void LoadIC::GenerateNormal(MacroAssembler* masm) { // Check that the receiver is a valid JS object. __ CmpObjectType(rax, FIRST_JS_OBJECT_TYPE, rbx); - __ j(less, &miss); + __ j(below, &miss); // If this assert fails, we have to check upper bound too. ASSERT(LAST_TYPE == JS_FUNCTION_TYPE);