[Webkit-unassigned] [Bug 256663] DFG: toString() returns a function instead of a string

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon May 15 09:59:38 PDT 2023


https://bugs.webkit.org/show_bug.cgi?id=256663

Michael Catanzaro <mcatanzaro at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|[GTK] toString() returns a  |DFG: toString() returns a
                   |function instead of a       |function instead of a
                   |string                      |string

--- Comment #7 from Michael Catanzaro <mcatanzaro at redhat.com> ---
JSC has four tiers: interpreter tier, baseline JIT tier, DFG JIT tier, and FTL JIT tier. So now we know your bug is caused by the DFG tier. Your attempts at a simple reproducer failed because the code isn't hot enough to trigger the DFG tier.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230515/caf2d0f9/attachment.htm>


More information about the webkit-unassigned mailing list