<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>265272</bug_id>
          
          <creation_ts>2023-11-22 18:44:59 -0800</creation_ts>
          <short_desc>Integer calculation error after JIT optimization.</short_desc>
          <delta_ts>2025-05-23 17:27:20 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>257949</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>anbu1024</reporter>
          <assigned_to name="David Degazio">d_degazio</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>darin</cc>
    
    <cc>d_degazio</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>ysuzuki</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1994475</commentid>
    <comment_count>0</comment_count>
    <who name="">anbu1024</who>
    <bug_when>2023-11-22 18:44:59 -0800</bug_when>
    <thetext>JSC version:
5a5dc5a5c26808fa98392aecc83d38935b72d255

Build options:
```
./Tools/Scripts/build-jsc --jsc-only --debug
```

test case:
```
function opt(){
	var x = -19278.05 &gt;&gt;&gt; String;
	var y = x + -19278.05;
	var z = y &gt;&gt; String;
	return z;
}

let a = opt();

print(&quot;result before JIT opt&quot;)
print(a);

for(let i=0; i&lt;0x200; i++){
	opt();
}

let b = opt();

print(&quot;result after JIT opt&quot;)
print(b);

```

Result:
```
result before JIT opt
-38557
result after JIT opt
-38556
```</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1994476</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2023-11-22 18:45:09 -0800</bug_when>
    <thetext>&lt;rdar://problem/118731614&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1999420</commentid>
    <comment_count>2</comment_count>
    <who name="David Degazio">d_degazio</who>
    <bug_when>2023-12-13 14:56:07 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/21767</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2119459</commentid>
    <comment_count>3</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2025-05-23 17:27:15 -0700</bug_when>
    <thetext>We fixed this via bug 257949</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2119460</commentid>
    <comment_count>4</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2025-05-23 17:27:20 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 257949 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>