Bug 1277866 - Fix arm64 write to unboxed object r=nbp a=abillings
authorJon Coppeard <jcoppeard@mozilla.com>
Tue, 07 Jun 2016 10:10:31 +0100
changeset 300862 551541092f094b820fddf2f2a21771ef2141a606
parent 300861 6134b92d1b089f3a7d3e36025d52f491befb4ae1
child 300863 c1c93849181d026f852b9217693c2b6818c07bb3
push id19599
push usercbook@mozilla.com
push dateWed, 08 Jun 2016 10:16:21 +0000
treeherderfx-team@81f4cc3f6f4c [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersnbp, abillings
bugs1277866
milestone50.0a1
Bug 1277866 - Fix arm64 write to unboxed object r=nbp a=abillings
js/src/jit/arm64/MacroAssembler-arm64.h
--- a/js/src/jit/arm64/MacroAssembler-arm64.h
+++ b/js/src/jit/arm64/MacroAssembler-arm64.h
@@ -336,17 +336,17 @@ class MacroAssemblerCompat : public vixl
           case 8: {
             vixl::UseScratchRegisterScope temps(this);
             const Register scratch = temps.AcquireX().asUnsized();
             unboxNonDouble(value, scratch);
             storePtr(scratch, address);
             return;
           }
           case 4:
-            storePtr(value.valueReg(), address);
+            store32(value.valueReg(), address);
             return;
           case 1:
             store8(value.valueReg(), address);
             return;
           default: MOZ_CRASH("Bad payload width");
         }
     }
     void moveValue(const Value& val, Register dest) {