Bug 68781

Summary:

DFG tracking of the value in cachedResultRegister does not handle op_mov correctly

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

fpizlo, oliver

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	oliver: review+

Filip Pizlo

Reported 2011-09-25 15:44:37 PDT

The old JIT implementation of op_mov does not handle the cachedResultRegister the same way as other operations. The DFG's tracking does not take this into account.

Attachments
the patch (3.72 KB, patch) 2011-09-25 16:11 PDT, Filip Pizlo	oliver: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Filip Pizlo

Comment 1 2011-09-25 16:11:04 PDT

Created attachment 108613 [details] the patch

Filip Pizlo

Comment 2 2011-09-25 16:40:17 PDT

Landed in r95925.

Note You need to log in before you can comment on or make changes to this bug.