[webkit-changes] [WebKit/WebKit] c635cf: DFG ASSERTION FAILED: AI-clobberize disagreement i...

[Yusuke Suzuki]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c635cf4f53f3ff908c83ae627775817944c129ca
      https://github.com/WebKit/WebKit/commit/c635cf4f53f3ff908c83ae627775817944c129ca
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2025-03-18 (Tue, 18 Mar 2025)

  Changed paths:
    A JSTests/stress/new-regexp-untyped-clobber-world.js
    M Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h

  Log Message:
  -----------
  DFG ASSERTION FAILED: AI-clobberize disagreement in Symbol.matchAll.
https://bugs.webkit.org/show_bug.cgi?id=289959
rdar://147331449

Reviewed by Mark Lam.

NewRegExpUntyped should declare clobberWorld in AI when it does not have
StringUse edges.

* JSTests/stress/new-regexp-untyped-clobber-world.js: Added.
* Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):

Canonical link: https://commits.webkit.org/292332@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications