Bug 99100

Summary:

UInt32ToNumber and OSR exit should be aware of copy propagation and correctly recover both versions of a variable that was subject to a UInt32ToNumber cast

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Filip Pizlo <fpizlo>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, ggaren, jeffrey+webkit, mark.lam, mhahnenberg, msaboff, oliver

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	msaboff: review+

Filip Pizlo

Reported 2012-10-11 14:17:14 PDT

Patch forthcoming. <rdar://problem/12480955>

Attachments
the patch (9.49 KB, patch) 2012-10-11 14:19 PDT, Filip Pizlo	msaboff: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Filip Pizlo

Comment 1 2012-10-11 14:19:30 PDT

Created attachment 168277 [details] the patch

Michael Saboff

Comment 2 2012-10-11 14:50:43 PDT

Comment on attachment 168277 [details] the patch r=me

Filip Pizlo

Comment 3 2012-10-11 14:54:17 PDT

Landed in http://trac.webkit.org/changeset/131097

Note You need to log in before you can comment on or make changes to this bug.