X-Git-Url: https://git.saurik.com/apple/javascriptcore.git/blobdiff_plain/ef99ff287df9046eb88937225e0554eabb00e33c..40a37d088818fc2fbeba2ef850dbcaaf294befbf:/dfg/DFGArrayMode.h

diff --git a/dfg/DFGArrayMode.h b/dfg/DFGArrayMode.h
index 9c67edb..084c985 100644
--- a/dfg/DFGArrayMode.h
+++ b/dfg/DFGArrayMode.h
@@ -406,7 +406,7 @@ public:
         case Array::ArrayStorage:
             return arrayModesWithIndexingShape(ArrayStorageShape);
         case Array::SlowPutArrayStorage:
-            return arrayModesWithIndexingShape(SlowPutArrayStorageShape);
+            return arrayModesWithIndexingShapes(SlowPutArrayStorageShape, ArrayStorageShape);
         default:
             return asArrayModes(NonArray);
         }
@@ -462,6 +462,13 @@ private:
         }
     }
     
+    ArrayModes arrayModesWithIndexingShapes(IndexingType shape1, IndexingType shape2) const
+    {
+        ArrayModes arrayMode1 = arrayModesWithIndexingShape(shape1);
+        ArrayModes arrayMode2 = arrayModesWithIndexingShape(shape2);
+        return arrayMode1 | arrayMode2;
+    }
+
     bool alreadyChecked(Graph&, Node*, AbstractValue&, IndexingType shape) const;
     
     union {