Branch: refs/heads/main Home: https://github.com/WebKit/WebKit Commit: 800a9bf27aa78b710149be8309103d96fb172051 https://github.com/WebKit/WebKit/commit/800a9bf27aa78b710149be8309103d96fb172051 Author: David Degazio <d_dega...@apple.com> Date: 2023-01-24 (Tue, 24 Jan 2023)
Changed paths: A JSTests/stress/bitwise-and-with-NaN-constant.js M Source/JavaScriptCore/dfg/DFGGraph.h Log Message: ----------- DFG should not speculate Int32 for NaN constants https://bugs.webkit.org/show_bug.cgi?id=251117 rdar://104608391 Reviewed by Mark Lam. Adds a check for NaN immediates to DFG::Graph::addImmediateShouldSpeculateInt32. This prevents NaNs from being speculated as Int32s and truncated during the DFG fixup phase despite being non-finite values. * JSTests/stress/bitwise-AND-with-NaN-constant.js: Added. (foo): * Source/JavaScriptCore/dfg/DFGGraph.h: Canonical link: https://commits.webkit.org/259340@main _______________________________________________ webkit-changes mailing list webkit-changes@lists.webkit.org https://lists.webkit.org/mailman/listinfo/webkit-changes