diff options
| author | Filip Pizlo <fpizlo@apple.com> | 2013-03-21 18:19:10 +0100 |
|---|---|---|
| committer | The Qt Project <gerrit-noreply@qt-project.org> | 2013-03-26 20:26:05 +0100 |
| commit | 728f3b433309b1737accae9092f7e5662216f285 (patch) | |
| tree | 0db0aaf858f6eaa9a160b29ef40cdc3b29e3ffbd /Source/JavaScriptCore/API/JavaScript.h | |
| parent | da77818d99e1312e20f6d19835ce356bbb509579 (diff) | |
| download | qtwebkit-728f3b433309b1737accae9092f7e5662216f285.tar.gz | |
javascript integer overflow
https://bugs.webkit.org/show_bug.cgi?id=104967
Reviewed by Mark Hahnenberg.
Source/JavaScriptCore:
Fix PutScopedVar backward flow.
* dfg/DFGPredictionPropagationPhase.cpp:
(JSC::DFG::PredictionPropagationPhase::propagate):
LayoutTests:
* fast/js/dfg-put-scoped-var-backward-flow-expected.txt: Added.
* fast/js/dfg-put-scoped-var-backward-flow.html: Added.
* fast/js/jsc-test-list:
* fast/js/script-tests/dfg-put-scoped-var-backward-flow.js: Added.
(sum):
Change-Id: I63c3091751555d3690f22e38a55408ced098adf8
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@137951 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Jocelyn Turcotte <jocelyn.turcotte@digia.com>
Diffstat (limited to 'Source/JavaScriptCore/API/JavaScript.h')
0 files changed, 0 insertions, 0 deletions