Bug 245966

Summary:	[RISC-V] integers sometimes interpreted as floats in createJSToWasmWrapper
Product:	WebKit	Reporter:	Juliana Sims <jsims>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal	CC:	mark.lam, webkit-bug-importer, ysuzuki, zdobersek
Priority:	P2	Keywords:	InRadar
Version:	WebKit Local Build
Hardware:	All
OS:	All

Description Juliana Sims 2022-10-03 09:00:01 PDT

This appears to be caused by the ordering of the if statement checking types.

Comment 1 Radar WebKit Bug Importer 2022-10-10 09:00:19 PDT

<rdar://problem/100981070>

Comment 2 Mark Lam 2022-10-10 09:13:02 PDT

Juliana, do you have a reproduction test case?  Can we also have more context on the claim you made in the description https://bugs.webkit.org/show_bug.cgi?id=245966#c0?

Comment 3 Juliana Sims 2022-10-11 07:09:19 PDT

(In reply to Mark Lam from comment #2)
> Juliana, do you have a reproduction test case?  Can we also have more
> context on the claim you made in the description
> https://bugs.webkit.org/show_bug.cgi?id=245966#c0?

You can step through `createJSToWasmWrapper` in a debugger on RISC-V while running this code: https://github.com/xanlpz/wasm-tests/blob/main/tests/i32stackargs.js

Comment 4 Yusuke Suzuki 2022-11-09 19:51:53 PST

This is RISC-V’s specific bug.