[Webkit-unassigned] [Bug 123277] REGRESSION(r157164): v8-v6/v8-raytrace.js crashes on arm and sh4

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 29 16:49:07 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=123277


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #215444|review?, commit-queue?      |review-, commit-queue-
               Flag|                            |




--- Comment #8 from Filip Pizlo <fpizlo at apple.com>  2013-10-29 16:47:53 PST ---
(From update of attachment 215444)
I think this is wrong.  The point of using nonArgGPR is that we want to use a register that isn't an argument.  regT0 may be an argument register on some platforms.  I think that the correct change is to make sure that when the JITs make calls, they use nonArgGPR for the callee.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list