[Webkit-unassigned] [Bug 109491] Strange bug in DFG OSR in JSC

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=109491





--- Comment #1 from Gabor Rapcsanyi <rgabor at webkit.org>  2013-02-11 14:37:12 PST ---
Created an attachment (id=187677)
 --> (https://bugs.webkit.org/attachment.cgi?id=187677&action=review)
test.js

The test output is when DFG starts to work:
1
--> a
--> b
2
--> c
3
1
--> a
--> b
2
--> c
3
1
--> a
--> b
--> a
--> b
2
--> c
3

The output with DFGDisassembly:
https://gist.github.com/rgabor-szeged/4758227

This problem exists on x86-64 and ARM architectures as well.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.