[Webkit-unassigned] [Bug 69570] DFG should not always speculate that ConvertThis is operating on an object

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Oct 6 15:39:14 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=69570





--- Comment #4 from Filip Pizlo <fpizlo at apple.com>  2011-10-06 15:39:14 PST ---
(In reply to comment #3)
> (From update of attachment 110042 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=110042&action=review
> 
> > Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp:1801
> > +            m_jit.andPtr(MacroAssembler::TrustedImm32(~TagBitUndefined), scratchGPR);
> 
> Does this handle null and undefined?

That's the idea.  After that and, null and undefined will look like null, and everything else will look non-null.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list