Bug 82249

Summary: DFG should assert that argument value recoveries can only be AlreadyInRegisterFile or Constant
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
the patch msaboff: review+

Description Filip Pizlo 2012-03-26 15:47:49 PDT
This is what Arguments relies on already, but the DFG asserts something weaker.
Comment 1 Filip Pizlo 2012-03-26 15:50:40 PDT
Created attachment 133912 [details]
the patch
Comment 2 Filip Pizlo 2012-03-26 15:59:14 PDT
Landed in http://trac.webkit.org/changeset/112164