Patch forthcoming.
This is asymptomatic because ForwardInt32ToDouble is only used in SetLocals, in which case the value is already stored to the stack. Still, we should fix this.
Reviewed by Gavin in person.
Landed in http://trac.webkit.org/changeset/142780
This is causing run-javascriptcore-tests failures. Fix on the way.
Created attachment 188183 [details] fix
Comment on attachment 188183 [details] fix View in context: https://bugs.webkit.org/attachment.cgi?id=188183&action=review r=me with ChangeLog fix. > Source/JavaScriptCore/ChangeLog:23 > +2013-02-13 Filip Pizlo <fpizlo@apple.com> > + > + Need a short description (OOPS!). > + Need the bug URL (OOPS!). > + > + Reviewed by NOBODY (OOPS!). > + > + * dfg/DFGMinifiedNode.h: > + (JSC::DFG::MinifiedNode::hasChild): ???
(In reply to comment #6) > (From update of attachment 188183 [details]) > View in context: https://bugs.webkit.org/attachment.cgi?id=188183&action=review > > r=me with ChangeLog fix. > > > Source/JavaScriptCore/ChangeLog:23 > > +2013-02-13 Filip Pizlo <fpizlo@apple.com> > > + > > + Need a short description (OOPS!). > > + Need the bug URL (OOPS!). > > + > > + Reviewed by NOBODY (OOPS!). > > + > > + * dfg/DFGMinifiedNode.h: > > + (JSC::DFG::MinifiedNode::hasChild): > > ??? Removed. I dunno what happened there.
Landed in http://trac.webkit.org/changeset/142800