[Webkit-unassigned] [Bug 86330] DFG performs incorrect constant folding on double-to-uint32 conversion in Uint32Array PutByVal

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun May 13 22:25:41 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=86330


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #141638|                            |review?
               Flag|                            |




--- Comment #3 from Filip Pizlo <fpizlo at apple.com>  2012-05-13 22:24:46 PST ---
Created an attachment (id=141638)
 --> (https://bugs.webkit.org/attachment.cgi?id=141638&action=review)
the patch

This fixes the reduced version of the bug that I found.

Felix, can you check if this does the trick for you?  It may be that you've uncovered more than one bug!

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list