[Webkit-unassigned] [Bug 70256] New: Live range splitting bug

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70256

           Summary: Live range splitting bug
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: fpizlo at apple.com


There's a live range splitting issue with this nested loop:
function f(a) {
    for (var i = 0; i < 100; i++)
        for (var j = 0; j < a.length; j++)
            a[j] =j;
}
f([1,2,3,4,5,6,7,8,9,10])

We end up predicting j as Int32|Other rather than Int32

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.