81583 2012-03-19 16:09:19 -0700 Prediction propagation for UInt32ToNumber incorrectly assumes that outs outcome does not change throughout the fixpoint 2012-03-19 16:38:49 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) All All RESOLVED FIXED P2 Normal --- 1 fpizlo webkit-unassigned oldest_to_newest 582392 0 fpizlo 2012-03-19 16:09:19 -0700 That was true before the arithmetic node flags backward-flow was combined with the forward-flow of prediction propagaiton. But it's not true anymore. Patch forthcoming. 582417 1 132709 fpizlo 2012-03-19 16:25:44 -0700 Created attachment 132709 the patch 582438 2 fpizlo 2012-03-19 16:38:49 -0700 Landed in http://trac.webkit.org/changeset/111269 132709 2012-03-19 16:25:44 -0700 2012-03-19 16:28:18 -0700 the patch mergeuint32_patch_1.diff text/plain 1566 fpizlo SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTExMjY1KQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE0IEBA CisyMDEyLTAzLTE5ICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAg UHJlZGljdGlvbiBwcm9wYWdhdGlvbiBmb3IgVUludDMyVG9OdW1iZXIgaW5jb3JyZWN0bHkgYXNz dW1lcyB0aGF0IG91dHMgb3V0Y29tZSBkb2VzIG5vdAorICAgICAgICBjaGFuZ2UgdGhyb3VnaG91 dCB0aGUgZml4cG9pbnQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu Y2dpP2lkPTgxNTgzCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg ICAgICAgKiBkZmcvREZHUHJlZGljdGlvblByb3BhZ2F0aW9uUGhhc2UuY3BwOgorICAgICAgICAo SlNDOjpERkc6OlByZWRpY3Rpb25Qcm9wYWdhdGlvblBoYXNlOjpwcm9wYWdhdGUpOgorCiAyMDEy LTAzLTE5ICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CiAKICAgICAgICAgR0Mgc2hv dWxkIG5vdCBhdHRlbXB0IHRvIGNsZWFyIExMSW50IGluc3RydWN0aW9uIGlubGluZSBjYWNoZXMg Zm9yIGNvZGUgYmxvY2tzIHRoYXQgYXJlIGluCkluZGV4OiBTb3VyY2UvSmF2YVNjcmlwdENvcmUv ZGZnL0RGR1ByZWRpY3Rpb25Qcm9wYWdhdGlvblBoYXNlLmNwcAo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3Vy Y2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR1ByZWRpY3Rpb25Qcm9wYWdhdGlvblBoYXNlLmNwcAko cmV2aXNpb24gMTExMjY1KQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdQcmVkaWN0 aW9uUHJvcGFnYXRpb25QaGFzZS5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTIxNyw5ICsyMTcsOSBA QCBwcml2YXRlOgogICAgICAgICAgICAgCiAgICAgICAgIGNhc2UgVUludDMyVG9OdW1iZXI6IHsK ICAgICAgICAgICAgIGlmIChub2RlQ2FuU3BlY3VsYXRlSW50ZWdlcihub2RlLmFyaXRoTm9kZUZs YWdzKCkpKQotICAgICAgICAgICAgICAgIGNoYW5nZWQgfD0gc2V0UHJlZGljdGlvbihQcmVkaWN0 SW50MzIpOworICAgICAgICAgICAgICAgIGNoYW5nZWQgfD0gbWVyZ2VQcmVkaWN0aW9uKFByZWRp Y3RJbnQzMik7CiAgICAgICAgICAgICBlbHNlCi0gICAgICAgICAgICAgICAgY2hhbmdlZCB8PSBz ZXRQcmVkaWN0aW9uKFByZWRpY3ROdW1iZXIpOworICAgICAgICAgICAgICAgIGNoYW5nZWQgfD0g bWVyZ2VQcmVkaWN0aW9uKFByZWRpY3ROdW1iZXIpOwogICAgICAgICAgICAgCiAgICAgICAgICAg ICBjaGFuZ2VkIHw9IG1fZ3JhcGhbbm9kZS5jaGlsZDEoKV0ubWVyZ2VBcml0aE5vZGVGbGFncyhm bGFncyk7CiAgICAgICAgICAgICBicmVhazsK