[Webkit-unassigned] [Bug 124675] [Win] JavaScript JIT crash (with DFG enabled).
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Nov 20 15:09:47 PST 2013
https://bugs.webkit.org/show_bug.cgi?id=124675
Geoffrey Garen <ggaren at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #217474|review? |review-
Flag| |
--- Comment #3 from Geoffrey Garen <ggaren at apple.com> 2013-11-20 15:08:18 PST ---
(From update of attachment 217474)
What this means is that there's some Windows-specific DFG code that uses "nonArgGPR0" when it should have used "regT0". Your patch hides the bug by making nonArgGPR0 equal to regT0. That's not a good long-term solution because the two registers can't be equal on all platforms.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list