[Webkit-unassigned] [Bug 40367] Math Javascript Bug on Safari 5 (webkit 533.16) under "32bit" mode

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40367





--- Comment #6 from Oliver Hunt <oliver at apple.com>  2010-06-09 15:29:29 PST ---
Slightly simplified: javascript:g=100000000.1;alert((g >> 27 | 0))

I would guess is that we're assuming any integer result is in a specific register when we get to the | but in the double case we're not actually doing that.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.