projects / profile / ivi / webkit-efl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fa46c06) | patch
DFG speculative JIT sometimes asserts that a value is not a number
authorfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 15 Sep 2011 21:53:48 +0000 (21:53 +0000)
committerfpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 15 Sep 2011 21:53:48 +0000 (21:53 +0000)
commit48964c9e42bfeb205511627c4ca83cfb3e3a0bf1
tree4729986f16cc2e60c93ebe82b7cf4aa6208f5be5tree | snapshot
parentfa46c06d9a3ccb3a92cb61729cfc03fff5ecce6fcommit | diff
DFG speculative JIT sometimes asserts that a value is not a number
even when it doesn't know anything about the number
https://bugs.webkit.org/show_bug.cgi?id=68189

Reviewed by Oliver Hunt.

* dfg/DFGGenerationInfo.h:
(JSC::DFG::GenerationInfo::isUnknownJS):
* dfg/DFGJITCodeGenerator.cpp:
(JSC::DFG::JITCodeGenerator::isKnownNotNumber):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@95233 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog diff | blob | history
Source/JavaScriptCore/dfg/DFGGenerationInfo.h diff | blob | history
Source/JavaScriptCore/dfg/DFGJITCodeGenerator.cpp diff | blob | history
Domain: Web Framework / Uncategorized;