Bug 106190

Summary: Data flow paths that carry non-numbers, non-undefined, non-null values should not cause subtractions and arithmetic additions (i.e. ++) to speculate double
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Severity: Normal CC: barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver, sam
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Description Flags
the patch sam: review+

Description Filip Pizlo 2013-01-05 17:12:10 PST
Patch forthcoming.
Comment 1 Filip Pizlo 2013-01-05 17:15:01 PST
Created attachment 181449 [details]
the patch
Comment 2 Filip Pizlo 2013-01-05 19:01:53 PST
Landed in http://trac.webkit.org/changeset/138915