Bug 118865 - LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it meant to store into the value profile
Summary: LLInt get_argument_by_val for JSVALUE64 stores into the array profile when it...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Filip Pizlo
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2013-07-18 15:03 PDT by Filip Pizlo
Modified: 2013-07-18 15:09 PDT (History)
7 users (show)

See Also:

Attachments
the patch (1.20 KB, patch)
2013-07-18 15:04 PDT, Filip Pizlo 		mhahnenberg: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2013-07-18 15:03:05 PDT 
This appears to be asymptomatic, but that's just a guess.
Comment 1 Filip Pizlo 2013-07-18 15:04:08 PDT 
Created attachment 207026 [details]
the patch
Comment 2 Mark Hahnenberg 2013-07-18 15:05:01 PDT 
Comment on attachment 207026 [details]
the patch

r=me
Comment 3 Filip Pizlo 2013-07-18 15:05:50 PDT 
<rdar://problem/14486297>
Comment 4 Filip Pizlo 2013-07-18 15:09:15 PDT 
Landed in http://trac.webkit.org/changeset/152868