[Webkit-unassigned] [Bug 256663] DFG: toString() returns a function instead of a string
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon May 15 09:59:38 PDT 2023
https://bugs.webkit.org/show_bug.cgi?id=256663
Michael Catanzaro <mcatanzaro at redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|[GTK] toString() returns a |DFG: toString() returns a
|function instead of a |function instead of a
|string |string
--- Comment #7 from Michael Catanzaro <mcatanzaro at redhat.com> ---
JSC has four tiers: interpreter tier, baseline JIT tier, DFG JIT tier, and FTL JIT tier. So now we know your bug is caused by the DFG tier. Your attempts at a simple reproducer failed because the code isn't hot enough to trigger the DFG tier.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230515/caf2d0f9/attachment.htm>
More information about the webkit-unassigned
mailing list