<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>67553</bug_id>
          
          <creation_ts>2011-09-02 22:06:11 -0700</creation_ts>
          <short_desc>ThunkGenerators does not convert positive double zero into integer zero</short_desc>
          <delta_ts>2011-09-03 22:42:58 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Filip Pizlo">fpizlo</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>barraclough</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>461733</commentid>
    <comment_count>0</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-09-02 22:06:11 -0700</bug_when>
    <thetext>ThunkGenerators does not convert positive double zero into integer zero, particularly when returning from floor, ceil, and round.  This means that doing Math.floor(2/1) does not return an integer as some benchmarks expect.

This omission is due to conservatism when dealing with double zero.  A double zero could be negative, in which case converting to an integer would be wrong.  But because the ThunkGenerators return the result in a GPR after boxing, it&apos;s possible to easily detect positive double zero.  The first step of boxing is moving the double into a GPR.  When the value is in a GPR, a positive double zero is represented by all bits being identically 0.  Thus, a branchTestPtr(Zero, regT0) is all that is needed to detect positive double zero and convert it to an integer zero.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461735</commentid>
    <comment_count>1</comment_count>
      <attachid>106246</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-09-02 22:11:17 -0700</bug_when>
    <thetext>Created attachment 106246
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461747</commentid>
    <comment_count>2</comment_count>
      <attachid>106246</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-09-02 22:27:28 -0700</bug_when>
    <thetext>Comment on attachment 106246
the patch

All tests pass.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461802</commentid>
    <comment_count>3</comment_count>
    <who name="Gavin Barraclough">barraclough</who>
    <bug_when>2011-09-03 01:43:29 -0700</bug_when>
    <thetext>Hey Filip, I haven&apos;t looked closely yet, but we really should make this work for JSVALUE32_64 too, if it doesn&apos;t do so already.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461803</commentid>
    <comment_count>4</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-09-03 01:46:40 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; Hey Filip, I haven&apos;t looked closely yet, but we really should make this work for JSVALUE32_64 too, if it doesn&apos;t do so already.

It&apos;s not clear to me that this will be performance-neutral in JSVALUE32_64.  On 64-bit it&apos;s a single branch.  On JSVALUE32_64 it would be two branches.  I&apos;ll mess around with it though.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461805</commentid>
    <comment_count>5</comment_count>
      <attachid>106258</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-09-03 02:13:40 -0700</bug_when>
    <thetext>Created attachment 106258
the patch - 32 bit as well</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461860</commentid>
    <comment_count>6</comment_count>
      <attachid>106258</attachid>
    <who name="Gavin Barraclough">barraclough</who>
    <bug_when>2011-09-03 14:57:16 -0700</bug_when>
    <thetext>Comment on attachment 106258
the patch - 32 bit as well

Awesome, cheers for covering 32_64 too Phil.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461919</commentid>
    <comment_count>7</comment_count>
      <attachid>106258</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-09-03 22:42:54 -0700</bug_when>
    <thetext>Comment on attachment 106258
the patch - 32 bit as well

Clearing flags on attachment: 106258

Committed r94500: &lt;http://trac.webkit.org/changeset/94500&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>461920</commentid>
    <comment_count>8</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-09-03 22:42:58 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>106246</attachid>
            <date>2011-09-02 22:11:17 -0700</date>
            <delta_ts>2011-09-03 02:13:40 -0700</delta_ts>
            <desc>the patch</desc>
            <filename>doublezero_patch_1.diff</filename>
            <type>text/plain</type>
            <size>1575</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>106258</attachid>
            <date>2011-09-03 02:13:40 -0700</date>
            <delta_ts>2011-09-03 22:42:54 -0700</delta_ts>
            <desc>the patch - 32 bit as well</desc>
            <filename>doublezero_patch_2.diff</filename>
            <type>text/plain</type>
            <size>2115</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>