Updates:
Status: Accepted
Cc: [email protected] [email protected] [email protected]
Comment #1 on issue 3392 by [email protected]: Miscompilation of
numeric comparison
http://code.google.com/p/v8/issues/detail?id=3392
Thanks for the report. Interesting bug :-)
This is an unfortunate interaction of HTypes, representations, escape
analysis and double field type tracking. The HAllocate for the double
field "c" has HType::HeapNumber, so the HPhi it flows into thinks that
Double would be a good representation for it. However, the
tagged-to-double/double-to-tagged conversion pair causes a throwaway heap
number to be mutated instead of the object's field.
FWIW, this bug dates back to the enabling of escape analysis back in
February. Either of --nouse-escape-analysis or --notrack-double-fields (or,
of course, --nocrankshaft) hides it.
Proposed fix: https://codereview.chromium.org/328343004
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
