Bug 231276

Summary:	DFG::ArrayMode::refine() should remember out-of-boundness for GetByVal on typed arrays
Product:	WebKit	Reporter:	Robin Morisset <rmorisset>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Robin Morisset

Reported 2021-10-05 21:09:53 PDT

Currently this information is only preserved for accesses on typed arrays if it is a PutByVal. Neither Saam nor me can see a reason for this, and the original commit that added this code has no explanation either.

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2021-10-12 21:10:21 PDT

<rdar://problem/84180359>

Note You need to log in before you can comment on or make changes to this bug.