Bug 109511

Summary: [JSC] DFG might force a local to be double even if we store non-numeric values into it
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Alexey Shvayka <ashvayka>
Status: RESOLVED FIXED    
Severity: Normal CC: ashvayka, barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver, sam
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: All   
OS: All   
Attachments:
Description Flags
test case none

Description Filip Pizlo 2013-02-11 16:12:48 PST
This appears to happen due to argument positions, and the fact that tallyVotesForShouldUseDoubleFormat() doesn't set NotUsingDoubleFormat.

A great example of this is the test case for https://bugs.webkit.org/show_bug.cgi?id=109491
Comment 1 Filip Pizlo 2014-06-10 14:02:06 PDT
Created attachment 232813 [details]
test case
Comment 2 Alexey Shvayka 2023-10-12 14:08:30 PDT
<rdar://116397731>