From 6bbb7fbbac94d0f511a7bd0cbd50854ab643bfb2 Mon Sep 17 00:00:00 2001
From: Simon Hausmann <simon.hausmann@digia.com>
Date: Tue, 18 Sep 2012 15:53:33 +0200
Subject: Imported WebKit commit c7503cef7ecb236730d1309676ab9fc723fd061d
 (http://svn.webkit.org/repository/webkit/trunk@128886)

New snapshot with various build fixes
---
 Source/JavaScriptCore/bytecode/ArrayProfile.cpp | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'Source/JavaScriptCore/bytecode/ArrayProfile.cpp')

diff --git a/Source/JavaScriptCore/bytecode/ArrayProfile.cpp b/Source/JavaScriptCore/bytecode/ArrayProfile.cpp
index 6b97f7806..9f4e1ce20 100644
--- a/Source/JavaScriptCore/bytecode/ArrayProfile.cpp
+++ b/Source/JavaScriptCore/bytecode/ArrayProfile.cpp
@@ -43,6 +43,11 @@ void ArrayProfile::computeUpdatedPrediction(OperationInProgress operation)
         m_lastSeenStructure = 0;
     }
     
+    if (hasTwoOrMoreBitsSet(m_observedArrayModes)) {
+        m_structureIsPolymorphic = true;
+        m_expectedStructure = 0;
+    }
+    
     if (operation == Collection
         && m_expectedStructure
         && !Heap::isMarked(m_expectedStructure)) {
-- 
cgit v1.2.1