[Webkit-unassigned] [Bug 245466] New: The exception of ValuePow and ValueMod is not caught when they are hoisted by LICM.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=245466

            Bug ID: 245466
           Summary: The exception of ValuePow and ValueMod is not caught
                    when they are hoisted by LICM.
           Product: WebKit
           Version: WebKit Local Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: entryhii at gmail.com

function main() {
    for (let v36 = 0; v36 < 1000; v36++) {
      try {
        // v69=6n; v69**=-2n; //hoist error!!!
        // 1n % 0n            //hoist error!!!
        512n ** 512n ** 512n; //hoist error!!!
      } catch (ee) {
        print("hello")
      }
    }
}
main();

With the above script as input to JSC, run JSC with the following parameters:
./jsc test.js --useConcurrentJIT=0 

In try block, the computation would throw an exception and caught by the catch block, and then print "hello".
However, in LICM, the computation in the try block is hoisted out of the loop. So the exception is not caught.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220921/c626401d/attachment-0001.htm>