[Webkit-unassigned] [Bug 69205] JSVALUE32_64 DFG JIT - unboxed integers and cells in register file must be reboxed before exiting from DFG JIT

Fri Sep 30 23:06:15 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=69205

Yuqiang Xian <yuqiang.xian at intel.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #109397|                            |review?
               Flag|                            |

--- Comment #1 from Yuqiang Xian <yuqiang.xian at intel.com>  2011-09-30 23:06:15 PST ---
Created an attachment (id=109397)
 --> (https://bugs.webkit.org/attachment.cgi?id=109397&action=review)
the patch

This scrubs all obvious crashes of DFG32_64 on SunSpider and kraken cases. Also the number of mozilla test failure cases is reduced to 65/1127 if with op_call/op_construct enabled in DFG32_64 (comparing to the 57/1127 if without op_call/op_construct support). - Tested on Linux x86.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.