From f77d7aab55174ea75f4623e98fd1d7be38d2475e Mon Sep 17 00:00:00 2001 From: "whesse@chromium.org" Date: Mon, 31 Aug 2009 15:28:17 +0000 Subject: [PATCH] X64: Fix bug introduced in revision 2779 Review URL: http://codereview.chromium.org/180040 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@2787 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/ia32/ic-ia32.cc | 2 +- src/x64/ic-x64.cc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ia32/ic-ia32.cc b/src/ia32/ic-ia32.cc index fa9b8a20f6..e39808b2ee 100644 --- a/src/ia32/ic-ia32.cc +++ b/src/ia32/ic-ia32.cc @@ -604,7 +604,7 @@ void CallIC::GenerateNormal(MacroAssembler* masm, int argc) { __ mov(ebx, FieldOperand(edx, HeapObject::kMapOffset)); __ movzx_b(eax, FieldOperand(ebx, Map::kInstanceTypeOffset)); __ cmp(eax, FIRST_JS_OBJECT_TYPE); - __ j(less, &miss, not_taken); + __ j(below, &miss, not_taken); // If this assert fails, we have to check upper bound too. ASSERT(LAST_TYPE == JS_FUNCTION_TYPE); diff --git a/src/x64/ic-x64.cc b/src/x64/ic-x64.cc index 29ea84605a..e2f7c30d27 100644 --- a/src/x64/ic-x64.cc +++ b/src/x64/ic-x64.cc @@ -849,7 +849,7 @@ void LoadIC::GenerateNormal(MacroAssembler* masm) { // Check that the receiver is a valid JS object. __ CmpObjectType(rax, FIRST_JS_OBJECT_TYPE, rbx); - __ j(less, &miss); + __ j(below, &miss); // If this assert fails, we have to check upper bound too. ASSERT(LAST_TYPE == JS_FUNCTION_TYPE);