[tbb-commits] [tor-browser] 176/311: Bug 1756957 - Fix AliasSet of MLoadTypedArrayElementHole - r=nbp a=dmeehan

[gitolite role]

This is an automated email from the git hooks/post-receive script.

pierov pushed a commit to branch geckoview-99.0.1-11.0-1
in repository tor-browser.

commit 86a98297c1588f7352580dc439b7898da04ba28e
Author: Lukas Bernhard <15350042+bernhl at users.noreply.github.com>
AuthorDate: Mon Mar 14 17:18:00 2022 +0000

    Bug 1756957 - Fix AliasSet of MLoadTypedArrayElementHole - r=nbp a=dmeehan
    
    Differential Revision: https://phabricator.services.mozilla.com/D139977
---
 js/src/jit/MIR.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/js/src/jit/MIR.h b/js/src/jit/MIR.h
index b89e9265d3245..1cb0bfc7f555f 100644
--- a/js/src/jit/MIR.h
+++ b/js/src/jit/MIR.h
@@ -6896,7 +6896,8 @@ class MLoadTypedArrayElementHole : public MBinaryInstruction,
     return congruentIfOperandsEqual(other);
   }
   AliasSet getAliasSet() const override {
-    return AliasSet::Load(AliasSet::UnboxedElement);
+    return AliasSet::Load(AliasSet::UnboxedElement | AliasSet::ObjectFields |
+                          AliasSet::ArrayBufferViewLengthOrOffset);
   }
   bool canProduceFloat32() const override {
     return arrayType_ == Scalar::Float32;

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.