Bug 66263 - DFG JIT does not always zero extend boolean result of DFG operations
Summary: DFG JIT does not always zero extend boolean result of DFG operations
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Gavin Barraclough
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2011-08-15 16:32 PDT by Gavin Barraclough
Modified: 2011-08-15 16:44 PDT (History)
0 users

See Also:


Attachments
The patch (20.07 KB, patch)
2011-08-15 16:34 PDT, Gavin Barraclough
sam: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Gavin Barraclough 2011-08-15 16:32:10 PDT
Functions returning bool results return values only valid to 8-bits.  The DFG JIT does not always extend bool results of DFG operations before treating them as 64-bit values.  This can be fixed by changing the return values of these functions.
Comment 1 Gavin Barraclough 2011-08-15 16:34:06 PDT
Created attachment 103977 [details]
The patch
Comment 2 Gavin Barraclough 2011-08-15 16:43:49 PDT
<rdar://problem/9921612>
Comment 3 Gavin Barraclough 2011-08-15 16:44:59 PDT
Fixed in r93070