[webkit-changes] [WebKit/WebKit] 383ab3: [JSC] Follow-up after 277050 at main

[Yusuke Suzuki]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 383ab3463ca796cfa9f5b4d1a5837f4845e540d9
      https://github.com/WebKit/WebKit/commit/383ab3463ca796cfa9f5b4d1a5837f4845e540d9
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2024-04-04 (Thu, 04 Apr 2024)

  Changed paths:
    A JSTests/stress/ftl-purify-nan-oob.js
    M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp

  Log Message:
  -----------
  [JSC] Follow-up after 277050 at main
https://bugs.webkit.org/show_bug.cgi?id=272178
rdar://125925062

Reviewed by Keith Miller.

When returning boxed JSValue in FTL for GetByVal, we should do purifyNaN to make it pure NaN.

* JSTests/stress/ftl-purify-nan-oob.js: Added.
(shouldBe):
(test):
* Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::compileGetByValImpl):

Canonical link: https://commits.webkit.org/277089@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications