Bug 109511 - [JSC] DFG might force a local to be double even if we store non-numeric values into it
Summary: [JSC] DFG might force a local to be double even if we store non-numeric value...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Alexey Shvayka
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2013-02-11 16:12 PST by Filip Pizlo
Modified: 2023-12-17 12:27 PST (History)
8 users (show)

See Also:


Attachments
test case (492 bytes, text/plain)
2014-06-10 14:02 PDT, Filip Pizlo
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2013-02-11 16:12:48 PST
This appears to happen due to argument positions, and the fact that tallyVotesForShouldUseDoubleFormat() doesn't set NotUsingDoubleFormat.

A great example of this is the test case for https://bugs.webkit.org/show_bug.cgi?id=109491
Comment 1 Filip Pizlo 2014-06-10 14:02:06 PDT
Created attachment 232813 [details]
test case
Comment 2 Alexey Shvayka 2023-10-12 14:08:30 PDT
<rdar://116397731>