diff options
| author | Michael Saboff <msaboff@apple.com> | 2013-04-04 13:57:06 +0200 |
|---|---|---|
| committer | The Qt Project <gerrit-noreply@qt-project.org> | 2013-04-04 14:56:16 +0200 |
| commit | d549f4b4ab324e2d4871db8cbf83c27af4ba7866 (patch) | |
| tree | f8107c0cca9221858b5434d6a8eb90f1c9ed31ab /Source/JavaScriptCore/heap/WeakSet.cpp | |
| parent | 7b17fd4f1afe569e92757e2b41fbaf01a285cc7b (diff) | |
| download | qtwebkit-d549f4b4ab324e2d4871db8cbf83c27af4ba7866.tar.gz | |
Harden ArithDiv of integers fix-up by inserting Int32ToDouble node directly
https://bugs.webkit.org/show_bug.cgi?id=107321
Reviewed by Filip Pizlo.
Split out the Int32ToDouble node insertion from fixDoubleEdge() and used it directly when we're fixing up
an ArithDiv node with integer inputs and output for platforms that don't have integer division.
Since we are checking that our inputs should be ints, we can just insert the Int32ToDouble node
without any further checks.
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
(JSC::DFG::FixupPhase::fixDoubleEdge):
(FixupPhase):
(JSC::DFG::FixupPhase::injectInt32ToDoubleNode):
Change-Id: Ic79f2823a7cfb9ce52bb935536972f48508579fd
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140203 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Jocelyn Turcotte <jocelyn.turcotte@digia.com>
Diffstat (limited to 'Source/JavaScriptCore/heap/WeakSet.cpp')
0 files changed, 0 insertions, 0 deletions