Bug 876458 - Fix MUnbox::congruentTo. r=jandem, a=akeybl
authorBrian Hackett <bhackett1024@gmail.com>
Wed, 29 May 2013 13:31:35 -0600
changeset 142794 8ee3ad5ab3e14ba5a70c5b63b2ce7f29adb16296
parent 142793 2229cf072c0dfce2eb3d828b5b44610cbbe388e4
child 142795 dc00e08878b8bd1bb4f9a2d36a295d94758a4334
push id2579
push userakeybl@mozilla.com
push dateMon, 24 Jun 2013 18:52:47 +0000
treeherdermozilla-beta@b69b7de8a05a [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersjandem, akeybl
bugs876458
milestone23.0a2
Bug 876458 - Fix MUnbox::congruentTo. r=jandem, a=akeybl
js/src/ion/MIR.h
--- a/js/src/ion/MIR.h
+++ b/js/src/ion/MIR.h
@@ -1994,16 +1994,18 @@ class MUnbox : public MUnaryInstruction,
         return mode() == Fallible
                ? Bailout_Normal
                : Bailout_TypeBarrier;
     }
     bool fallible() const {
         return mode() != Infallible;
     }
     bool congruentTo(MDefinition *const &ins) const {
+        if (!ins->isUnbox() || ins->toUnbox()->mode() != mode())
+            return false;
         return congruentIfOperandsEqual(ins);
     }
     AliasSet getAliasSet() const {
         return AliasSet::None();
     }
     void printOpcode(FILE *fp);
 };