JavaScriptCore-7600.1.4.16.1.tar.gz

[apple/javascriptcore.git] / llint / LowLevelInterpreter64.asm

diff --git a/llint/LowLevelInterpreter64.asm b/llint/LowLevelInterpreter64.asm
index 486b7b3580b8893e942a8467d71ab6d4cc88ffa0..67a8f1b8c9cf3d53616704c5e98a465852c063f4 100644 (file)
--- a/llint/LowLevelInterpreter64.asm
+++ b/llint/LowLevelInterpreter64.asm
@@ -1978,6 +1978,11 @@ _llint_op_next_pname:
 
 
 _llint_op_catch:
+    # Gotta restore the tag registers. We could be throwing from FTL, which may
+    # clobber them.
+    move TagTypeNumber, tagTypeNumber
+    move TagMask, tagMask
+    
     # This is where we end up from the JIT's throw trampoline (because the
     # machine code return address will be set to _llint_op_catch), and from
     # the interpreter's throw trampoline (see _llint_throw_trampoline).