The DFG Integer Check Combining phase should force an OSR exit for CheckInBounds...
authormark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 22 Mar 2017 01:55:00 +0000 (01:55 +0000)
committermark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 22 Mar 2017 01:55:00 +0000 (01:55 +0000)
commitbc52eb5c59f8799778bfe7f526dbcf44fd23f4ff
tree8d357cbaa8359b2b80349677081431b2bf60bdce
parent8fe4fb301e8b492ab446424f46a8b0d26b551486
The DFG Integer Check Combining phase should force an OSR exit for CheckInBounds on a negative constant min bound.
https://bugs.webkit.org/show_bug.cgi?id=169933
<rdar://problem/31105125>

Reviewed by Filip Pizlo and Geoffrey Garen.

Also fixed the bit-rotted RangeKey::dump() function.

* dfg/DFGIntegerCheckCombiningPhase.cpp:
(JSC::DFG::IntegerCheckCombiningPhase::handleBlock):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@214240 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/dfg/DFGIntegerCheckCombiningPhase.cpp