<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>137283</bug_id>
          
          <creation_ts>2014-09-30 19:52:50 -0700</creation_ts>
          <short_desc>Fix a type check bug for op_profile_type in 64-bit baseline JIT</short_desc>
          <delta_ts>2014-10-01 01:17:37 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>INVALID</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Saam Barati">saam</reporter>
          <assigned_to name="Saam Barati">saam</assigned_to>
          <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1038436</commentid>
    <comment_count>0</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2014-09-30 19:52:50 -0700</bug_when>
    <thetext>op_profile_type will successfully pass a type check compiled for TypeNumber when the argument is actually an integer. 
Currently, we want the type profiler to specifically capture that this has been an Int, but maybe in the future
it&apos;s worth getting more lossy about this kinda thing.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1038504</commentid>
    <comment_count>1</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2014-10-01 01:17:37 -0700</bug_when>
    <thetext>Now, TypeNumber is now assumed to be Integer || Double, not just Double, which makes fixing this irrelevant.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>