tor-browser

commit 639c749daa5b3233b5d0cd1a3368f21e7479a061
parent 80de3bfc92ff505f458fe9a03a74f09ae0733d8c
Author: Rong "Mantle" Bao <webmaster@csmantle.top>
Date:   Wed,  5 Nov 2025 14:00:50 +0000

Bug 1997503 - [riscv64] Supply good tag shift to ExtractBits when unboxing for GC barrier. r=jandem

Differential Revision: https://phabricator.services.mozilla.com/D271395

Diffstat:
M
js/src/jit/riscv64/MacroAssembler-riscv64.h
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/js/src/jit/riscv64/MacroAssembler-riscv64.h b/js/src/jit/riscv64/MacroAssembler-riscv64.h
@@ -841,10 +841,10 @@ class MacroAssemblerRiscv64Compat : public MacroAssemblerRiscv64 {
 
   void unboxGCThingForGCBarrier(const Address& src, Register dest) {
     loadPtr(src, dest);
-    ExtractBits(dest, dest, 0, JSVAL_TAG_SHIFT - 1);
+    ExtractBits(dest, dest, 0, JSVAL_TAG_SHIFT);
   }
   void unboxGCThingForGCBarrier(const ValueOperand& src, Register dest) {
-    ExtractBits(dest, src.valueReg(), 0, JSVAL_TAG_SHIFT - 1);
+    ExtractBits(dest, src.valueReg(), 0, JSVAL_TAG_SHIFT);
   }
 
   void unboxWasmAnyRefGCThingForGCBarrier(const Address& src, Register dest) {