Home
last modified time | relevance | path

Searched refs:baseCell (Results 1 – 3 of 3) sorted by relevance

/external/webkit/Source/JavaScriptCore/interpreter/
DInterpreter.cpp1214 JSCell* baseCell = baseValue.asCell(); in tryCachePutByID() local
1215 Structure* structure = baseCell->structure(); in tryCachePutByID()
1239 if (baseCell != slot.base()) { in tryCachePutByID()
1252 normalizePrototypeChain(callFrame, baseCell); in tryCachePutByID()
2518 JSCell* baseCell = baseValue.asCell(); in privateExecute() local
2521 if (LIKELY(baseCell->structure() == structure)) { in privateExecute()
2522 ASSERT(baseCell->isObject()); in privateExecute()
2523 JSObject* baseObject = asObject(baseCell); in privateExecute()
2549 JSCell* baseCell = baseValue.asCell(); in privateExecute() local
2552 if (LIKELY(baseCell->structure() == structure)) { in privateExecute()
[all …]
/external/webkit/Source/JavaScriptCore/jit/
DJITStubs.cpp819 JSCell* baseCell = baseValue.asCell(); in tryCachePutByID() local
820 Structure* structure = baseCell->structure(); in tryCachePutByID()
828 if (baseCell != slot.base()) { in tryCachePutByID()
843 normalizePrototypeChain(callFrame, baseCell); in tryCachePutByID()
887 JSCell* baseCell = baseValue.asCell(); in tryCacheGetByID() local
888 Structure* structure = baseCell->structure(); in tryCacheGetByID()
/external/webkit/Source/JavaScriptCore/
DChangeLog-2010-05-247460 The bug was caused by incorrect use of baseCell instead of baseValue,
7462 correct this object), baseCell is clobbered as part of walking the