Bug 119555

Summary: 32-bit code gen for TypeOf doesn't properly update the AbstractInterpreter state
Product: WebKit Reporter: Mark Hahnenberg <mhahnenberg>
Component: JavaScriptCoreAssignee: Mark Hahnenberg <mhahnenberg>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch ggaren: review+

Mark Hahnenberg
Reported 2013-08-07 11:25:26 PDT
It uses a speculationCheck where it should be using a DFG_TYPE_CHECK like the 64-bit backend does.
Attachments
Patch (1.76 KB, patch)
2013-08-07 11:27 PDT, Mark Hahnenberg 		ggaren: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Mark Hahnenberg
Comment 1 2013-08-07 11:25:55 PDT
<rdar://problem/14666354>
Mark Hahnenberg
Comment 2 2013-08-07 11:27:07 PDT
Created attachment 208287 [details] Patch
Geoffrey Garen
Comment 3 2013-08-07 11:29:34 PDT
Comment on attachment 208287 [details] Patch r=me
Mark Hahnenberg
Comment 4 2013-08-07 11:35:21 PDT
Committed r153793: <http://trac.webkit.org/changeset/153793>
Note You need to log in before you can comment on or make changes to this bug.