Summary: | DFG AI assertions about not having to do type checks at the point of a Known use kind are unsound | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Filip Pizlo <fpizlo> | ||||
Component: | JavaScriptCore | Assignee: | Filip Pizlo <fpizlo> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | ||||||
Priority: | P2 | ||||||
Version: | Other | ||||||
Hardware: | All | ||||||
OS: | All | ||||||
Bug Depends on: | |||||||
Bug Blocks: | 148610 | ||||||
Attachments: |
|
Description
Filip Pizlo
2015-08-31 15:10:33 PDT
I might end up fixing this before I do property type inference. It looks like that code might reveal this bug. Created attachment 260369 [details]
the patch
Comment on attachment 260369 [details]
the patch
r=me
Landed in http://trac.webkit.org/changeset/189219 |