[Webkit-unassigned] [Bug 113862] Negative zero checks cause unnecessary speculation failures on SunSpider math-spectral-norm.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Apr 3 06:46:58 PDT 2013
https://bugs.webkit.org/show_bug.cgi?id=113862
--- Comment #2 from Roman Zhuykov <zhroma at ispras.ru> 2013-04-03 06:45:11 PST ---
Created an attachment (id=196342)
--> (https://bugs.webkit.org/attachment.cgi?id=196342&action=review)
testcase
For problem with wrong "isNotNegZero" implementation I just found the following testcase:
function main() {
var x = 1;
var y = -1;
var s;
var i;
for (i = 0; i < 100000; i++) {
if (i == 99999)
x = 0;
s = 1/(x/y+(-0));
}
return s;
}
print(1/(0/-1+(-0)));
print(main());
On x86-64 Linux this prints (wrong):
-Infinity
Infinity
While on ARMv7 Linux (right):
-Infinity
-Infinity
My patch fixes this.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list