[Webkit-unassigned] [Bug 68320] DFG JIT does not speculate aggressively enough on GetById
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Sep 19 14:33:54 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=68320
Oliver Hunt <oliver at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #107797|review? |review-
Flag| |
--- Comment #10 from Oliver Hunt <oliver at apple.com> 2011-09-19 14:33:55 PST ---
(From update of attachment 107797)
safeCast isn't actually safe -- you should use Checked<T> if you want overflow safe arithmetic, or at least make safeCast use isInBounds from CheckedArithmetic.h so that your overflow detection is correct.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list