From ac9fdbf123c0ea1aa162f998e80442a65506382b Mon Sep 17 00:00:00 2001
From: Moonchild <moonchild@palemoon.org>
Date: Sat, 9 Apr 2022 00:31:18 +0200
Subject: [js] Fix AliasSet of MLoadTypedArrayElementHole

---
 js/src/jit/MIR.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'js')

diff --git a/js/src/jit/MIR.h b/js/src/jit/MIR.h
index 8fd777d3ee..a398ef3344 100644
--- a/js/src/jit/MIR.h
+++ b/js/src/jit/MIR.h
@@ -10113,7 +10113,7 @@ class MLoadTypedArrayElementHole
         return congruentIfOperandsEqual(other);
     }
     AliasSet getAliasSet() const override {
-        return AliasSet::Load(AliasSet::UnboxedElement);
+        return AliasSet::Load(AliasSet::UnboxedElement | AliasSet::ObjectFields);
     }
     bool canProduceFloat32() const override { return arrayType_ == Scalar::Float32; }
 
-- 
cgit v1.2.3