Bug 311505

Summary: [JSC] `isWithinPowerOfTwo` is unsound for BitAnd with negative mask in DFG BackwardsPropagation
Product: WebKit Reporter: Sosuke Suzuki <sosuke>
Component: JavaScriptCoreAssignee: Sosuke Suzuki <sosuke>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Sosuke Suzuki
Reported 2026-04-04 21:17:16 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Sosuke Suzuki
Comment 1 2026-04-04 21:21:04 PDT
Pull request: https://github.com/WebKit/WebKit/pull/62061
EWS
Comment 2 2026-04-06 17:53:23 PDT
Committed 310678@main (83895848013f): <https://commits.webkit.org/310678@main> Reviewed commits have been landed. Closing PR #62061 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-04-06 17:54:11 PDT
<rdar://problem/174200551>
Note You need to log in before you can comment on or make changes to this bug.