commit 00379b82ae545f9f4434ef3226ea07d1d38fa2a3
author danno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> Fri May 04 09:16:29 2012 +0000
committer danno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> Fri May 04 09:16:29 2012 +0000
tree 87e3cbe5908dcd9957ab3a70060e0e45a048f8b9
parent b632a284cd50e711cbf5f411760b70dbe08e57c1

Merged r11507 into trunk branch.

MIPS: Ensure reload of elements pointer in StoreFastDoubleElement stub

R=mstarzinger@chromium.org

Review URL: https://chromiumcodereview.appspot.com/10382005

git-svn-id: http://v8.googlecode.com/svn/trunk@11508 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

src/mips/stub-cache-mips.cc

diff --git a/src/mips/stub-cache-mips.cc b/src/mips/stub-cache-mips.cc
index e2e69c8..676b523 100644
--- a/src/mips/stub-cache-mips.cc
+++ b/src/mips/stub-cache-mips.cc
@@ -4537,6 +4537,8 @@
     // Increment the length of the array.
     __ li(length_reg, Operand(Smi::FromInt(1)));
     __ sw(length_reg, FieldMemOperand(receiver_reg, JSArray::kLengthOffset));
+    __ lw(elements_reg,
+          FieldMemOperand(receiver_reg, JSObject::kElementsOffset));
     __ jmp(&finish_store);
 
     __ bind(&check_capacity);