[INFER] Fix bug in JSOP_MOD for negative zero case, bug 608750.
authorBrian Hackett <bhackett1024@gmail.com>
Thu, 04 Nov 2010 07:10:42 -0700
changeset 74608 c8d33e4cb418d42901e136140ef56c94c8b409d3
parent 74607 4744eea6dd30b7e3bb3f30c0670b780e4507e343
child 74609 022de3c39539d4c4f76c0eb6ceec770bd96c2e04
push id2
push userbsmedberg@mozilla.com
push dateFri, 19 Aug 2011 14:38:13 +0000
bugs608750
milestone2.0b8pre
[INFER] Fix bug in JSOP_MOD for negative zero case, bug 608750.
js/src/methodjit/FastArithmetic.cpp
--- a/js/src/methodjit/FastArithmetic.cpp
+++ b/js/src/methodjit/FastArithmetic.cpp
@@ -944,17 +944,17 @@ mjit::Compiler::jsop_mod()
     }
 
     frame.popn(2);
 
     JSValueType type = knownPushedType(0);
     if (type != JSVAL_TYPE_UNKNOWN)
         frame.pushTypedPayload(type, X86Registers::edx);
     else
-        frame.pushNumber(X86Registers::edx, true);
+        frame.pushNumber(X86Registers::edx);
 
     if (slowPath)
         stubcc.rejoin(Changes(1));
 #endif
 }
 
 bool
 mjit::Compiler::jsop_equality_int_string(JSOp op, BoolStub stub, jsbytecode *target, JSOp fused)