[Webkit-unassigned] [Bug 64017] DFG speculative JIT may crash when speculating int on a non-int JSConstant

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=64017





--- Comment #3 from Filip Pizlo <fpizlo at apple.com>  2011-07-06 13:08:24 PST ---
(In reply to comment #2)
> (From update of attachment 99863 [details])
> At some point we should remove that resolved FIXME you found, too.

Yup, see https://bugs.webkit.org/show_bug.cgi?id=64022

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.