Bug 69565
| Summary: | JavaScript tests should have coverage for corner cases of DFG speculation | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Filip Pizlo <fpizlo> |
| Component: | Tools / Tests | Assignee: | Nobody <webkit-unassigned> |
| Status: | NEW | ||
| Severity: | Normal | ||
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
Filip Pizlo
The JavaScriptCore DFG JIT compiler likes to speculate on a lot of fast cases of JavaScript execution, like that integer additions don't overflow, bitwise operations don't create numbers that are not representable using signed 32-bit integers, etc. We only have limited test coverage for these cases, and that should be fixed.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |