[Webkit-unassigned] [Bug 158699] New: DFG Validation fails when performing a concatenation with only a single entry

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=158699

            Bug ID: 158699
           Summary: DFG Validation fails when performing a concatenation
                    with only a single entry
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: NeedsRadar
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: oliver at apple.com
                CC: fpizlo at apple.com, sbarati at apple.com

Fairly simple failure:

function f() {
    for (;;)`${1}`
}
f();

The issue is that we appear to be issuing a str_concat with a single child, which the DFG thinks is invalid. The obvious solutions are to either:
* don't emit str_concat from a single child template literal
* Have the DFG acknowledge this can happen

I think the former is the better option.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160613/555afafb/attachment.html>