Bug 119148

Summary:

REGRESSION(FTL): Fix lots of crashes in sh4 JIT

Product:

WebKit

Reporter:

Julien Brianceau <jbriance>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue, fpizlo, oliver

Priority:

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Fix secondArgumentRegister and nativeCallTrampoline in sh4 backend.	none

Julien Brianceau

Reported 2013-07-26 06:50:37 PDT

- secondArgumentRegister is wrong in JSInterfaceJIT.h - "move t0, a0" is missing in nativeCallTrampoline from LLINT, reuse the MIPS implementation to avoid code duplication

Attachments
Fix secondArgumentRegister and nativeCallTrampoline in sh4 backend. (2.99 KB, patch) 2013-07-26 06:55 PDT, Julien Brianceau	no flags	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Julien Brianceau

Comment 1 2013-07-26 06:55:11 PDT

Created attachment 207528 [details] Fix secondArgumentRegister and nativeCallTrampoline in sh4 backend.

Csaba Osztrogonác

Comment 2 2013-07-26 07:01:02 PDT

Comment on attachment 207528 [details] Fix secondArgumentRegister and nativeCallTrampoline in sh4 backend. rs=me

WebKit Commit Bot

Comment 3 2013-07-26 07:40:43 PDT

Comment on attachment 207528 [details] Fix secondArgumentRegister and nativeCallTrampoline in sh4 backend. Clearing flags on attachment: 207528 Committed r153371: <http://trac.webkit.org/changeset/153371>

WebKit Commit Bot

Comment 4 2013-07-26 07:40:45 PDT

All reviewed patches have been landed. Closing bug.

Note You need to log in before you can comment on or make changes to this bug.