<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - JSC: DFG::SpeculativeJIT::compile special case for MIPS for PutByValWithThis"
href="https://bugs.webkit.org/show_bug.cgi?id=157741#c13">Comment # 13</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - JSC: DFG::SpeculativeJIT::compile special case for MIPS for PutByValWithThis"
href="https://bugs.webkit.org/show_bug.cgi?id=157741">bug 157741</a>
from <span class="vcard"><a class="email" href="mailto:guijemont@igalia.com" title="Guillaume Emont <guijemont@igalia.com>"> <span class="fn">Guillaume Emont</span></a>
</span></b>
<pre>I spent some time trying to avoid the move, doing the following instead of setting up a JSValueOperand and moving its registers to $a2/$a3:
VirtualRegister virtualRegister = m_jit.graph().varArgChild(node, 0)->virtualRegister();
m_jit.load32(JITCompiler::payloadFor(virtualRegister), GPRInfo::argumentGPR2);
m_jit.load32(JITCompiler::tagFor(virtualRegister), GPRInfo::argumentGPR3);
But then, when I run super-property-access.js, I get this:
# jsc super-property-access.js
Exception: TypeError: Attempted to assign to readonly property.
<a href="mailto:baz@super-property-access.js">baz@super-property-access.js</a>:442:23
super-property-access.js:450:16
<a href="mailto:test@super-property-access.js">test@super-property-access.js</a>:9:10
global <a href="mailto:code@super-property-access.js">code@super-property-access.js</a>:429:5
#
I spent some time investigating that but could not really understand what's wrong with that approach. So for now I think we can stick with the latest patch I posted.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>