Status: Assigned
Owner: [email protected]
CC: [email protected], [email protected]
Labels: Type-Bug Priority-Medium HW-All Crankshaft Area-Compiler OS-All ES5
New issue 4389 by [email protected]: Crankshaft optimization of inlined
Math operators generates wrong code
https://code.google.com/p/v8/issues/detail?id=4389
The following example fails in Crankshaft:
function foo(x) { Math.fround(x); }
foo(1);
foo(2);
%OptimizeFunctionOnNextCall(foo);
assertThrows(function() { foo(Symbol()) }, TypeError);
The reason is that the first DCE pass removes the inlined math operator.
But without that operator no HChange is inserted for x, hence the code will
not deoptimize properly if x is not a number.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
