Bug 216386

Summary:

Don't assume byte code operands are uint32 JSValues

Product:

WebKit

Reporter:

Saam Barati <saam>

Component:

JavaScriptCore

Assignee:

Saam Barati <saam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

benjamin, fpizlo, ggaren, gskachkov, guijemont, jsc32, keith_miller, mark.lam, msaboff, rmorisset, ross.kirsling, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
patch	none

Description Saam Barati 2020-09-10 16:23:18 PDT

We might exit from DFG, and they may not be uint32s.

Comment 1 Saam Barati 2020-09-10 16:32:40 PDT

Created attachment 408495 [details]
patch

Comment 2 Yusuke Suzuki 2020-09-10 16:37:56 PDT

Comment on attachment 408495 [details]
patch

r=me

Comment 3 Mark Lam 2020-09-10 20:29:17 PDT

Comment on attachment 408495 [details]
patch

Nice.

Comment 4 EWS 2020-09-14 09:46:07 PDT

Committed r267017: <https://trac.webkit.org/changeset/267017>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 408495 [details].

Comment 5 Radar WebKit Bug Importer 2020-09-14 09:47:17 PDT

<rdar://problem/68860613>

Comment 6 Mark Lam 2020-09-14 09:51:31 PDT

<rdar://problem/68463767>