Bug 277895
| Summary: | [JSC] Atomics.and returns incorrect number type in JIT compiler | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | GuY <q602706150> |
| Component: | JavaScriptCore | Assignee: | Keith Miller <keith_miller> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Local Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
GuY
```
function opt() {
const arr = new Int16Array([-1]);
print(this.Atomics.and(arr, 0,0));
}
for(let i=0;i<10;i++)
opt();
```
actual output:
-1
-1
-1
-1
-1
-1
-1
65535
65535
65535
expected behavior:
an Int16 number should be returned, 65535 is out of range.
run args:
cmake-build-debug/bin/jsc test.js --useConcurrentJIT=0 --jitPolicyScale=0.001
tested on the latest webkit git main branch:
08eaf750b8abe612c38d277d82d2eae71288acd2
The tested platform is x86_64 fedora linux system.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/134115829>
Keith Miller
Pull request: https://github.com/WebKit/WebKit/pull/32404
EWS
Committed 282476@main (67c8ea6bd1f0): <https://commits.webkit.org/282476@main>
Reviewed commits have been landed. Closing PR #32404 and removing active labels.