RESOLVED FIXED Bug 151515
[ARM64] stress/op_div.js is failing on some divide by 0 cases.
https://bugs.webkit.org/show_bug.cgi?id=151515
Summary [ARM64] stress/op_div.js is failing on some divide by 0 cases.
Mark Lam
Reported 2015-11-20 14:15:39 PST
This newly added is exposing a latent bug somewhere in the ARM64 JITs.
Attachments
proposed patch. (1.94 KB, patch)
2015-11-26 07:10 PST, Mark Lam
saam: review+
Radar WebKit Bug Importer
Comment 1 2015-11-20 14:16:52 PST
Mark Lam
Comment 2 2015-11-20 15:47:37 PST
The test has been temporarily skipped in r192708: <http://trac.webkit.org/r192708>.
Mark Lam
Comment 3 2015-11-26 07:10:30 PST
Created attachment 266186 [details] proposed patch.
Saam Barati
Comment 4 2015-11-27 16:45:01 PST
Comment on attachment 266186 [details] proposed patch. View in context: https://bugs.webkit.org/attachment.cgi?id=266186&action=review LGTM > Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:3560 > + speculationCheck(Overflow, JSValueRegs(), 0, m_jit.branchTest32(MacroAssembler::Zero, op2GPR)); Style: I think this is nicer to read with "0 => nullptr"
Mark Lam
Comment 5 2015-11-30 08:57:45 PST
Thanks for the review. I've changed the "0" to "nullptr". Landed in r192795: <http://trac.webkit.org/r192795>.
Note You need to log in before you can comment on or make changes to this bug.