Fix overflow when subtracting -2^31 (bug 610652, r=dmandelin).
commit9ec27da07dabdcd237a318e7e4f222df661d9138
authorDavid Anderson <danderson@mozilla.com>
Sat, 13 Nov 2010 01:55:11 +0000 (12 17:55 -0800)
committerDavid Anderson <danderson@mozilla.com>
Sat, 13 Nov 2010 01:55:11 +0000 (12 17:55 -0800)
treea17d2e91f81f42e3d4d041d5edad8305486c264c
parent03a05c92db3b9111352f8d22c157357fb7ce7b76
Fix overflow when subtracting -2^31 (bug 610652, r=dmandelin).
js/src/jit-test/tests/jaeger/bug610652.js [new file with mode: 0644]
js/src/methodjit/FastArithmetic.cpp