Bug 106190

Summary:

Data flow paths that carry non-numbers, non-undefined, non-null values should not cause subtractions and arithmetic additions (i.e. ++) to speculate double

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Filip Pizlo <fpizlo>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver, sam

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	sam: review+

Description Filip Pizlo 2013-01-05 17:12:10 PST

Patch forthcoming.

Comment 1 Filip Pizlo 2013-01-05 17:15:01 PST

Created attachment 181449 [details]
the patch

Comment 2 Filip Pizlo 2013-01-05 19:01:53 PST

Landed in http://trac.webkit.org/changeset/138915