Bug 157011 - [JSC] Constant folding of UInt32ToNumber is incorrect
Summary: [JSC] Constant folding of UInt32ToNumber is incorrect
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Benjamin Poulain
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-25 18:36 PDT by Benjamin Poulain
Modified: 2016-04-25 21:08 PDT (History)
5 users (show)

See Also:


Attachments
Patch (5.24 KB, patch)
2016-04-25 18:50 PDT, Benjamin Poulain
no flags Details | Formatted Diff | Diff
Patch (5.22 KB, patch)
2016-04-25 19:03 PDT, Benjamin Poulain
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Benjamin Poulain 2016-04-25 18:36:06 PDT
[JSC] Constant folding of UInt32ToNumber is incorrect
Comment 1 Benjamin Poulain 2016-04-25 18:50:11 PDT
Created attachment 277301 [details]
Patch
Comment 2 Benjamin Poulain 2016-04-25 19:03:17 PDT
Created attachment 277303 [details]
Patch
Comment 3 Geoffrey Garen 2016-04-25 19:46:16 PDT
Comment on attachment 277303 [details]
Patch

r=me
Comment 4 WebKit Commit Bot 2016-04-25 21:07:56 PDT
Comment on attachment 277303 [details]
Patch

Clearing flags on attachment: 277303

Committed r200071: <http://trac.webkit.org/changeset/200071>
Comment 5 WebKit Commit Bot 2016-04-25 21:08:00 PDT
All reviewed patches have been landed.  Closing bug.