JavaScriptCore-7600.1.4.15.12.tar.gz

[apple/javascriptcore.git] / dfg / DFGArrayMode.h

diff --git a/dfg/DFGArrayMode.h b/dfg/DFGArrayMode.h
index 9c67edbc8b0cadfbaae9bcbe8e2c974e6d82206f..084c985cef83fac6fcc566022fd62c6ee1729465 100644 (file)
--- a/dfg/DFGArrayMode.h
+++ b/dfg/DFGArrayMode.h
@@ -406,7 +406,7 @@ public:
         case Array::ArrayStorage:
             return arrayModesWithIndexingShape(ArrayStorageShape);
         case Array::SlowPutArrayStorage:
-            return arrayModesWithIndexingShape(SlowPutArrayStorageShape);
+            return arrayModesWithIndexingShapes(SlowPutArrayStorageShape, ArrayStorageShape);
         default:
             return asArrayModes(NonArray);
         }
@@ -462,6 +462,13 @@ private:
         }
     }
     
+    ArrayModes arrayModesWithIndexingShapes(IndexingType shape1, IndexingType shape2) const
+    {
+        ArrayModes arrayMode1 = arrayModesWithIndexingShape(shape1);
+        ArrayModes arrayMode2 = arrayModesWithIndexingShape(shape2);
+        return arrayMode1 | arrayMode2;
+    }
+
     bool alreadyChecked(Graph&, Node*, AbstractValue&, IndexingType shape) const;
     
     union {