[Webkit-unassigned] [Bug 63347] DFG non-speculative JIT has potentially harmful speculations with respect to arithmetic operations.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sat Jun 25 19:24:38 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=63347
Gavin Barraclough <barraclough at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #98584|review?, commit-queue? |review-, commit-queue-
Flag| |
--- Comment #8 from Gavin Barraclough <barraclough at apple.com> 2011-06-25 19:24:38 PST ---
(From update of attachment 98584)
Hey Filip, looks good now, but I think you missed a review comment, I believe that in the case of UInt32ToNumber & ValueToNumber the result could be reusing the operand's register?
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list