[Webkit-unassigned] [Bug 198648] New: [JSC] Use mergePrediction in ValuePow prediction propagation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=198648

            Bug ID: 198648
           Summary: [JSC] Use mergePrediction in ValuePow prediction
                    propagation
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ysuzuki at apple.com

Currently, we are accidentally using setPrediction. This is wrong since prediction propagation (not processInvariant) must extend the speculation types to ensure we eventually reach to the fixed point.
setPrediction can discard previously configured predictions, can lead to oscillation potentially.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190607/280fb77a/attachment.html>