[Webkit-unassigned] [Bug 124675] [Win] JavaScript JIT crash (with DFG enabled).

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Nov 20 15:09:47 PST 2013


https://bugs.webkit.org/show_bug.cgi?id=124675


Geoffrey Garen <ggaren at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #217474|review?                     |review-
               Flag|                            |




--- Comment #3 from Geoffrey Garen <ggaren at apple.com>  2013-11-20 15:08:18 PST ---
(From update of attachment 217474)
What this means is that there's some Windows-specific DFG code that uses "nonArgGPR0" when it should have used "regT0". Your patch hides the bug by making nonArgGPR0 equal to regT0. That's not a good long-term solution because the two registers can't be equal on all platforms.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list