Bug 68724

Summary: ValueToDouble handling in prediction propagation should be ASSERT_NOT_REACHED
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: barraclough, fpizlo, oliver, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
the patch none

Filip Pizlo
Reported 2011-09-23 13:30:15 PDT
ValueToDouble is inserted as a result of prediction propagation. It should never be inserted by the parser. Hence, it should be handled by the prediction propagator by asserting that the case is not reached.
Attachments
the patch (1.25 KB, patch)
2011-09-23 13:31 PDT, Filip Pizlo 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Filip Pizlo
Comment 1 2011-09-23 13:31:41 PDT
Created attachment 108525 [details] the patch
WebKit Review Bot
Comment 2 2011-09-23 15:57:41 PDT
Comment on attachment 108525 [details] the patch Clearing flags on attachment: 108525 Committed r95876: <http://trac.webkit.org/changeset/95876>
WebKit Review Bot
Comment 3 2011-09-23 15:57:45 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.