109511 2013-02-11 16:12:48 -0800 [JSC] DFG might force a local to be double even if we store non-numeric values into it 2023-12-17 12:27:37 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Nightly Build All All RESOLVED FIXED InRadar P2 Normal --- 1 fpizlo ashvayka ashvayka barraclough ggaren mark.lam mhahnenberg msaboff oliver sam oldest_to_newest 830283 0 fpizlo 2013-02-11 16:12:48 -0800 This appears to happen due to argument positions, and the fact that tallyVotesForShouldUseDoubleFormat() doesn't set NotUsingDoubleFormat. A great example of this is the test case for https://bugs.webkit.org/show_bug.cgi?id=109491 1014517 1 232813 fpizlo 2014-06-10 14:02:06 -0700 Created attachment 232813 test case 1984715 2 ashvayka 2023-10-12 14:08:30 -0700 <rdar://116397731> 2000295 3 ashvayka 2023-12-17 12:27:37 -0800 Fixed in https://github.com/WebKit/WebKit/commit/bf2f05e02c8a12f6b716ea8bc21e62852d8493ac. 232813 2014-06-10 14:02:06 -0700 2014-06-10 14:02:06 -0700 test case double-inlined-call-argument.js text/plain 492 fpizlo ZnVuY3Rpb24gZm9vKGEsIGIsIGMsIHApIHsKICAgIGEgPSBiICsgYzsKICAgIGlmIChwKSB7CiAg ICAgICAgYSsrOwogICAgICAgIHJldHVybiBhOwogICAgfQp9CgpmdW5jdGlvbiBiYXIoYSwgYikg ewogICAgcmV0dXJuIGZvbygiaGVsbG8iLCBhLCBiLCBhIDw9IGIpOwp9Cgpub0lubGluZShiYXIp OwoKZm9yICh2YXIgaSA9IDA7IGkgPCAxMDAwMDA7ICsraSkgewogICAgdmFyIHJlc3VsdCA9IGJh cigyMDAwMDAwMDAwLCAyMDAwMDAwMDAwLjUpOwogICAgaWYgKHJlc3VsdCAhPSA0MDAwMDAwMDAx LjUpCiAgICAgICAgdGhyb3cgIkVycm9yOiBiYWQgcmVzdWx0OiAiICsgcmVzdWx0Owp9CgppZiAo cmVvcHRpbWl6YXRpb25SZXRyeUNvdW50KGJhcikgIT0gMCkKICAgIHRocm93ICJFcnJvcjogc2hv dWxkIG5vdCBoYXZlIHJlb3B0aW1pemVkIGJhciwgYnV0IHJlb3B0aW1pemVkICIgKyByZW9wdGlt aXphdGlvblJldHJ5Q291bnQoYmFyKSArICIgdGltZXMuIjsK