Bug 137283
| Summary: | Fix a type check bug for op_profile_type in 64-bit baseline JIT | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Saam Barati <saam> |
| Component: | JavaScriptCore | Assignee: | Saam Barati <saam> |
| Status: | RESOLVED INVALID | ||
| Severity: | Normal | CC: | fpizlo, ggaren |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Saam Barati
op_profile_type will successfully pass a type check compiled for TypeNumber when the argument is actually an integer.
Currently, we want the type profiler to specifically capture that this has been an Int, but maybe in the future
it's worth getting more lossy about this kinda thing.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Saam Barati
Now, TypeNumber is now assumed to be Integer || Double, not just Double, which makes fixing this irrelevant.