
<html>

    <head>

      <base href="https://bugs.webkit.org/" />

    </head>

    <body><table border="1" cellspacing="0" cellpadding="8">

        <tr>

          <th>Bug ID</th>

          <td><a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - Eager FTL failure for strict comparison of NaN with number check"

   href="https://bugs.webkit.org/show_bug.cgi?id=158368">158368</a>

          </td>

        </tr>


        <tr>

          <th>Summary</th>

          <td>Eager FTL failure for strict comparison of NaN with number check

          </td>

        </tr>


        <tr>

          <th>Classification</th>

          <td>Unclassified

          </td>

        </tr>


        <tr>

          <th>Product</th>

          <td>WebKit

          </td>

        </tr>


        <tr>

          <th>Version</th>

          <td>WebKit Nightly Build

          </td>

        </tr>


        <tr>

          <th>Hardware</th>

          <td>Unspecified

          </td>

        </tr>


        <tr>

          <th>OS</th>

          <td>Unspecified

          </td>

        </tr>


        <tr>

          <th>Status</th>

          <td>NEW

          </td>

        </tr>


        <tr>

          <th>Severity</th>

          <td>Normal

          </td>

        </tr>


        <tr>

          <th>Priority</th>

          <td>P2

          </td>

        </tr>


        <tr>

          <th>Component</th>

          <td>JavaScriptCore

          </td>

        </tr>


        <tr>

          <th>Assignee</th>

          <td>webkit-unassigned&#64;lists.webkit.org

          </td>

        </tr>


        <tr>

          <th>Reporter</th>

          <td>joepeck&#64;webkit.org

          </td>

        </tr>


        <tr>

          <th>CC</th>

          <td>benjamin&#64;webkit.org, fpizlo&#64;apple.com, ggaren&#64;apple.com, keith_miller&#64;apple.com, sbarati&#64;apple.com

          </td>

        </tr></table>

      <p>

        <div>

        <pre>Created <span class=""><a href="attachment.cgi?id=280480" name="attach_280480" title="[TEST] JS Reduction">attachment 280480</a> <a href="attachment.cgi?id=280480&amp;action=edit" title="[TEST] JS Reduction">[details]</a></span>

[TEST] JS Reduction


* SUMMARY

Eager FTL failure for strict comparison of NaN with number check


* TEST

function isNaNOnDouble(value)

{

    return (+value) !== value;

}

noInline(isNaNOnDouble);


function testIsNaNOnDoubles()

{

    var value = isNaNOnDouble(-0);

    if (value)

        throw &quot;isNaNOnDouble(-0) = &quot; + value;


    var value = isNaNOnDouble(NaN);

    if (!value)

        throw &quot;isNaNOnDouble(NaN) = &quot; + value;


    var value = isNaNOnDouble(Number.POSITIVE_INFINITY);

    if (value)

        throw &quot;isNaNOnDouble(Number.POSITIVE_INFINITY) = &quot; + value;

}

noInline(testIsNaNOnDoubles);


for (var i = 0; i &lt; 1e6; ++i) {

    testIsNaNOnDoubles();

}


* STEPS TO REPRODUCE

1. $ DYLD_FRAMEWORK_PATH=$build/Release $build/Release/jsc --useFTLJIT=true --useConcurrentJIT=false --thresholdForJITAfterWarmUp=100 --thresholdForJITAfterWarmUp=10 --thresholdForJITSoon=10 --thresholdForOptimizeAfterWarmUp=20 --thresholdForOptimizeAfterLongWarmUp=20 --thresholdForOptimizeSoon=20 --thresholdForFTLOptimizeAfterWarmUp=20 --thresholdForFTLOptimizeSoon=20 number-compare-strict.js


Exception: isNaNOnDouble(NaN) = false


* NOTES

- The issue only reproduces if --useConcurrentJIT=false</pre>

        </div>

      </p>

      <hr>

      <span>You are receiving this mail because:</span>

      
      <ul>

          <li>You are the assignee for the bug.</li>

      </ul>

    </body>

</html>