HomeSort by relevance Sort by last modified time
    Searched full:propertyreg (Results 1 - 1 of 1) sorted by null

  /external/webkit/Source/JavaScriptCore/dfg/
DFGSpeculativeJIT.cpp 559 MacroAssembler::RegisterID propertyReg = property.registerID();
568 speculationCheck(m_jit.branch32(MacroAssembler::AboveOrEqual, propertyReg, MacroAssembler::Address(baseReg, JSArray::vectorLengthOffset())));
574 m_jit.loadPtr(MacroAssembler::BaseIndex(storageReg, propertyReg, MacroAssembler::ScalePtr, OBJECT_OFFSETOF(ArrayStorage, m_vector[0])), result.registerID());
589 MacroAssembler::RegisterID propertyReg = property.registerID();
595 speculationCheck(m_jit.branch32(MacroAssembler::AboveOrEqual, propertyReg, MacroAssembler::Address(baseReg, JSArray::vectorLengthOffset())));
601 MacroAssembler::Jump notHoleValue = m_jit.branchTestPtr(MacroAssembler::NonZero, MacroAssembler::BaseIndex(storageReg, propertyReg, MacroAssembler::ScalePtr, OBJECT_OFFSETOF(ArrayStorage, m_vector[0])));
605 MacroAssembler::Jump lengthDoesNotNeedUpdate = m_jit.branch32(MacroAssembler::Below, propertyReg, MacroAssembler::Address(storageReg, OBJECT_OFFSETOF(ArrayStorage, m_length)));
606 m_jit.add32(TrustedImm32(1), propertyReg);
607 m_jit.store32(propertyReg, MacroAssembler::Address(storageReg, OBJECT_OFFSETOF(ArrayStorage, m_length)));
608 m_jit.sub32(TrustedImm32(1), propertyReg);
    [all...]

Completed in 83 milliseconds