NEW 69565
JavaScript tests should have coverage for corner cases of DFG speculation 
https://bugs.webkit.org/show_bug.cgi?id=69565
Summary JavaScript tests should have coverage for corner cases of DFG speculation
Filip Pizlo
Reported 2011-10-06 14:44:34 PDT
The JavaScriptCore DFG JIT compiler likes to speculate on a lot of fast cases of JavaScript execution, like that integer additions don't overflow, bitwise operations don't create numbers that are not representable using signed 32-bit integers, etc. We only have limited test coverage for these cases, and that should be fixed.
Attachments
Add attachment proposed patch, testcase, etc.
Note You need to log in before you can comment on or make changes to this bug.