[Webkit-unassigned] [Bug 63347] DFG non-speculative JIT has potentially harmful speculations with respect to arithmetic operations.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jun 25 19:24:38 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=63347


Gavin Barraclough <barraclough at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #98584|review?, commit-queue?      |review-, commit-queue-
               Flag|                            |




--- Comment #8 from Gavin Barraclough <barraclough at apple.com>  2011-06-25 19:24:38 PST ---
(From update of attachment 98584)
Hey Filip, looks good now, but I think you missed a review comment, I believe that in the case of UInt32ToNumber & ValueToNumber the result could be reusing the operand's register?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list