Bug 66263

Summary: DFG JIT does not always zero extend boolean result of DFG operations
Product: WebKit Reporter: Gavin Barraclough <barraclough>
Component: JavaScriptCoreAssignee: Gavin Barraclough <barraclough>
Status: RESOLVED FIXED    
Severity: Normal Keywords: InRadar
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
The patch sam: review+

Gavin Barraclough
Reported 2011-08-15 16:32:10 PDT
Functions returning bool results return values only valid to 8-bits. The DFG JIT does not always extend bool results of DFG operations before treating them as 64-bit values. This can be fixed by changing the return values of these functions.
Attachments
The patch (20.07 KB, patch)
2011-08-15 16:34 PDT, Gavin Barraclough 		sam: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Gavin Barraclough
Comment 1 2011-08-15 16:34:06 PDT
Created attachment 103977 [details] The patch
Gavin Barraclough
Comment 2 2011-08-15 16:43:49 PDT
<rdar://problem/9921612>
Gavin Barraclough
Comment 3 2011-08-15 16:44:59 PDT
Fixed in r93070
Note You need to log in before you can comment on or make changes to this bug.