summaryrefslogtreecommitdiffstats
diff options
authorMichal Klocek <michal.klocek@qt.io>2025-04-23 18:09:21 +0200
committerMichal Klocek <michal.klocek@qt.io>2025-04-23 16:00:55 +0000
commit6d29e9cfcfffa7632cc3858ceaf8940677ba9c91 (patch)
tree60325865b54dd787f95d51d6980df35cfd22749b
parentcd393db6242e80ba4a791173cef89897ce2f4322 (diff)
[fixup] Security bug 39646048987-based
The count of register should stay the same. Change-Id: Ie527cab0f74c15423e94c424ba01d2ebb3bd755e Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/641363 Reviewed-by: Michael BrĂ¼ning <michael.bruning@qt.io>
-rw-r--r--chromium/v8/src/codegen/ia32/macro-assembler-ia32.cc2
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/v8/src/codegen/ia32/macro-assembler-ia32.cc b/chromium/v8/src/codegen/ia32/macro-assembler-ia32.cc
index 88cfc44dc4b..182c7d93c5f 100644
--- a/chromium/v8/src/codegen/ia32/macro-assembler-ia32.cc
+++ b/chromium/v8/src/codegen/ia32/macro-assembler-ia32.cc
@@ -307,7 +307,7 @@ int TurboAssembler::PopCallerSaved(SaveFPRegsMode fp_mode, Register exclusion1,
int bytes = 0;
if (fp_mode == kSaveFPRegs) {
// Restore all allocatable XMM registers.
- int delta = kDoubleSize * (XMMRegister::kNumRegisters - 2);
+ int delta = kDoubleSize * (XMMRegister::kNumRegisters - 1);
for (int i = XMMRegister::kNumRegisters - 2; i >= 0; i--) {
XMMRegister reg = XMMRegister::from_code(i);
movsd(reg, Operand(esp, i * kDoubleSize));