haikuwebkit/LayoutTests/js/regress-139808.html

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script src="../resources/js-test-pre.js"></script>
</head>
<body>
<script src="script-tests/regress-139808.js"></script>
<script src="../resources/js-test-post.js"></script>
</body>
</html>
REGRESSION(174226): Captured arguments in a using function compiled by the DFG have the initial value when the closure was invoked https://bugs.webkit.org/show_bug.cgi?id=139808 Reviewed by Oliver Hunt. Source/JavaScriptCore: There are three changes here. 1) Create a VariableWatchpointSet for captured arguments variables. 2) Properly use the VariableWatchpointSet* found in op_put_to_scope in the 64 bit LLInt code. 3) Add the same putLocalClosureVar path to the 32 bit LLInt code that exists in the 64 bit version. * bytecompiler/BytecodeGenerator.cpp: (JSC::BytecodeGenerator::BytecodeGenerator): * llint/LowLevelInterpreter32_64.asm: * llint/LowLevelInterpreter64.asm: LayoutTests: New regression test. * js/regress-139808-expected.txt: Added. * js/regress-139808.html: Added. * js/script-tests/regress-139808.js: Added. (theClosureFunction.rot13): (theClosureFunction): Canonical link: https://commits.webkit.org/157742@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@177578 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2014-12-19 18:48:25 +00:00			`<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">`
			`<html>`
			`<head>`
			`<script src="../resources/js-test-pre.js"></script>`
			`</head>`
			`<body>`
			`<script src="script-tests/regress-139808.js"></script>`
			`<script src="../resources/js-test-post.js"></script>`
			`</body>`
			`</html>`