RESOLVED FIXED Bug 69549
DFG JIT 32_64 should check type of values being filled by fillSpeculateInt 
https://bugs.webkit.org/show_bug.cgi?id=69549
Summary DFG JIT 32_64 should check type of values being filled by fillSpeculateInt
Gavin Barraclough
Reported 2011-10-06 11:58:31 PDT
This breaks sunspider/3d-cube.
Attachments
Add attachment proposed patch, testcase, etc.
Gavin Barraclough
Comment 1 2011-10-06 11:59:57 PDT
Fixed in r96841
Note You need to log in before you can comment on or make changes to this bug.