X-Git-Url: https://git.saurik.com/apple/javascriptcore.git/blobdiff_plain/81345200c95645a1b0d2635520f96ad55dfde63f..2656c66b5b30d5597e842a751c7f19ad6c2fe31a:/llint/LowLevelInterpreter64.asm

diff --git a/llint/LowLevelInterpreter64.asm b/llint/LowLevelInterpreter64.asm
index 486b7b3..67a8f1b 100644
--- a/llint/LowLevelInterpreter64.asm
+++ b/llint/LowLevelInterpreter64.asm
@@ -1978,6 +1978,11 @@ _llint_op_next_pname:
 
 
 _llint_op_catch:
+    # Gotta restore the tag registers. We could be throwing from FTL, which may
+    # clobber them.
+    move TagTypeNumber, tagTypeNumber
+    move TagMask, tagMask
+    
     # This is where we end up from the JIT's throw trampoline (because the
     # machine code return address will be set to _llint_op_catch), and from
     # the interpreter's throw trampoline (see _llint_throw_trampoline).