git://git.webkit.org / WebKit-https.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ccc7fe2) | patch
validateOSREntryValue with Int52 should box the value being checked into double format
authorsbarati@apple.com <sbarati@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 28 Mar 2019 01:06:01 +0000 (01:06 +0000)
committersbarati@apple.com <sbarati@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 28 Mar 2019 01:06:01 +0000 (01:06 +0000)
commitaf0fa3975cd249f22efafcab4c437530ad9b4efc
treeb639ffe467aed28c630ae85fe5537ba825860266tree | snapshot
parentccc7fe25a21270b74b97ddc5d8680091d4b074a1commit | diff
validateOSREntryValue with Int52 should box the value being checked into double format
https://bugs.webkit.org/show_bug.cgi?id=196313
<rdar://problem/49306703>

Reviewed by Yusuke Suzuki.

JSTests:

* stress/validate-int-52-ai-state.js: Added.

Source/JavaScriptCore:

* dfg/DFGOSREntry.cpp:
(JSC::DFG::prepareOSREntry):
* ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::validateAIState):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@243596 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JSTests/ChangeLog diff | blob | history
JSTests/stress/validate-int-52-ai-state.js [new file with mode: 0644] blob
Source/JavaScriptCore/ChangeLog diff | blob | history
Source/JavaScriptCore/dfg/DFGOSREntry.cpp diff | blob | history
Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp diff | blob | history
Mirror of the WebKit open source project from svn.webkit.org.