[Webkit-unassigned] [Bug 160925] New: Remove invalid assertion in the DFG backend's GetById emitter.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Aug 16 17:31:27 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=160925
Bug ID: 160925
Summary: Remove invalid assertion in the DFG backend's GetById
emitter.
Classification: Unclassified
Product: WebKit
Version: WebKit Local Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
Assignee: webkit-unassigned at lists.webkit.org
Reporter: mark.lam at apple.com
The DFG bytecode parser will force an OSR exit if it sees an op_get_by_id or op_get_by_val with a SpecNone prediction. Hence, it is safe to emit code for the GetById node even if its prediction is SpecNone. The GetById node may still be seen by the DFG backend, but it is valid for it to have a SpecNone prediction.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160817/6807a36c/attachment.html>
More information about the webkit-unassigned
mailing list