[Webkit-unassigned] [Bug 74463] New: DFG OSR exit for UInt32ToNumber should roll forward, not roll backward
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Dec 13 16:40:26 PST 2011
https://bugs.webkit.org/show_bug.cgi?id=74463
Summary: DFG OSR exit for UInt32ToNumber should roll forward,
not roll backward
Product: WebKit
Version: 528+ (Nightly build)
Platform: All
OS/Version: All
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: fpizlo at apple.com
Once we get to a UInt32ToNumber node, we may no longer have the state necessary to execute the bytecode operation that the UInt32ToNumber belongs to. So a standard OSR exit, which relies on rolling execution state backwards, won't work. But we have all of the information necessary to roll execution forward. We should do that instead.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list