Reviewers: Yang,
Message:
Hi Yang, here is the change we discussed and a new test file. There is
actually
a test failing in mjsunit/array-literal-transitions.js that I need to solve,
though it's likely just adjusting expectations.
Description:
Bugfix in hydrogen array literal code generation.
If an array literal contains some non-constant elements, is of type SMI, and
then the boilerplate transitions to double or fast sometime after we've
crankshafted the code, then we could incorrectly store smis in double
arrays.
BUG=
Please review this at
https://codereview.chromium.org/17334004/
SVN Base:
https://v8.googlecode.com/svn/branches/bleeding_edge
Affected files:
M src/hydrogen.cc
A + test/mjsunit/array-literal-feedback.js