[Webkit-unassigned] [Bug 74463] New: DFG OSR exit for UInt32ToNumber should roll forward, not roll backward

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Dec 13 16:40:26 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=74463

           Summary: DFG OSR exit for UInt32ToNumber should roll forward,
                    not roll backward
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fpizlo at apple.com


Once we get to a UInt32ToNumber node, we may no longer have the state necessary to execute the bytecode operation that the UInt32ToNumber belongs to. So a standard OSR exit, which relies on rolling execution state backwards, won't work.  But we have all of the information necessary to roll execution forward.  We should do that instead.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list