JavaScriptCore-7600.1.4.17.5.tar.gz

[apple/javascriptcore.git] / runtime / ArgList.cpp

diff --git a/runtime/ArgList.cpp b/runtime/ArgList.cpp
index 74240418c23821deab945ace9a364db84746fe84..5149815c2356a52c3cbdab33e551d1b6eb4088df 100644 (file)
--- a/runtime/ArgList.cpp
+++ b/runtime/ArgList.cpp
@@ -24,7 +24,7 @@
 #include "HeapRootVisitor.h"
 #include "JSCJSValue.h"
 #include "JSObject.h"
-#include "Operations.h"
+#include "JSCInlines.h"
 
 using std::min;
 
@@ -37,7 +37,7 @@ void ArgList::getSlice(int startIndex, ArgList& result) const
         return;
     }
 
-    result.m_args = m_args - startIndex;
+    result.m_args = m_args + startIndex;
     result.m_argCount =  m_argCount - startIndex;
 }
 
@@ -54,9 +54,9 @@ void MarkedArgumentBuffer::markLists(HeapRootVisitor& heapRootVisitor, ListSet&
 void MarkedArgumentBuffer::slowAppend(JSValue v)
 {
     int newCapacity = m_capacity * 4;
-    EncodedJSValue* newBuffer = &(new EncodedJSValue[newCapacity])[newCapacity - 1];
+    EncodedJSValue* newBuffer = new EncodedJSValue[newCapacity];
     for (int i = 0; i < m_capacity; ++i)
-        newBuffer[-i] = m_buffer[-i];
+        newBuffer[i] = m_buffer[i];
 
     if (EncodedJSValue* base = mallocBase())
         delete [] base;