Bug 75138

Summary:

DFG JIT does exactly the wrong thing when doing strict equality on two known cells

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

InRadar

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	oliver: review+

Description Filip Pizlo 2011-12-22 15:17:09 PST

Patch forthcoming.

Comment 1 Filip Pizlo 2011-12-22 15:17:40 PST

<rdar://problem/10621526>

Comment 2 Filip Pizlo 2011-12-22 15:19:59 PST

Created attachment 120391 [details]
the patch

Comment 3 Filip Pizlo 2011-12-22 15:24:55 PST

Landed in http://trac.webkit.org/changeset/103587