Bug 220399

Summary: Fix a dataMemoryTempRegister use violation in FTLLowerDFGToB3's compileLoopHint().
Product: WebKit Reporter: Mark Lam <mark.lam>
Component: JavaScriptCoreAssignee: Mark Lam <mark.lam>
Status: RESOLVED FIXED    
Severity: Normal CC: ews-watchlist, keith_miller, msaboff, saam, tzagallo, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
proposed patch. none

Description Mark Lam 2021-01-06 22:30:08 PST 
This was tripping an assertion failure on the invalid use of the dataMemoryTempRegister during a Debug build JSC stress test run with DoesGC validation enabled.
Comment 1 Mark Lam 2021-01-06 22:39:29 PST 
Created attachment 417155 [details]
proposed patch.
Comment 2 Yusuke Suzuki 2021-01-06 22:44:15 PST 
Comment on attachment 417155 [details]
proposed patch.

r=me
Comment 3 Mark Lam 2021-01-06 23:48:39 PST 
Comment on attachment 417155 [details]
proposed patch.

Thanks for the review.  Landing now.
Comment 4 EWS 2021-01-06 23:53:00 PST 
Committed r271226: <https://trac.webkit.org/changeset/271226>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 417155 [details].
Comment 5 Radar WebKit Bug Importer 2021-01-06 23:53:16 PST 
<rdar://problem/72880074>