Title: [235073] releases/WebKitGTK/webkit-2.22/Source/_javascript_Core
- Revision
- 235073
- Author
- carlo...@webkit.org
- Date
- 2018-08-20 07:08:03 -0700 (Mon, 20 Aug 2018)
Log Message
Merge r235021 - Unreviewed, rolling out r234852.
https://bugs.webkit.org/show_bug.cgi?id=188736
Workaround is not correct (Requested by yusukesuzuki on
Reverted changeset:
"[JSC] Should not rotate constant with 64"
https://bugs.webkit.org/show_bug.cgi?id=188556
https://trac.webkit.org/changeset/234852
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/ChangeLog (235072 => 235073)
--- releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/ChangeLog 2018-08-20 14:07:59 UTC (rev 235072)
+++ releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/ChangeLog 2018-08-20 14:08:03 UTC (rev 235073)
@@ -1,3 +1,17 @@
+2018-08-19 Commit Queue <commit-qu...@webkit.org>
+
+ Unreviewed, rolling out r234852.
+ https://bugs.webkit.org/show_bug.cgi?id=188736
+
+ Workaround is not correct (Requested by yusukesuzuki on
+ #webkit).
+
+ Reverted changeset:
+
+ "[JSC] Should not rotate constant with 64"
+ https://bugs.webkit.org/show_bug.cgi?id=188556
+ https://trac.webkit.org/changeset/234852
+
2018-08-19 Yusuke Suzuki <yusukesuz...@slowstart.org>
[WTF] Add WTF::unalignedLoad and WTF::unalignedStore
Modified: releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/assembler/MacroAssembler.h (235072 => 235073)
--- releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/assembler/MacroAssembler.h 2018-08-20 14:07:59 UTC (rev 235072)
+++ releases/WebKitGTK/webkit-2.22/Source/_javascript_Core/assembler/MacroAssembler.h 2018-08-20 14:08:03 UTC (rev 235073)
@@ -1290,13 +1290,6 @@
return shouldBlindPointerForSpecificArch(value);
}
-
- uint8_t generateRotationSeed(size_t widthInBits)
- {
- // Generate the seed in [0, widthInBits). We should not generate widthInBits
- // since it leads to `<< widthInBits`, which is an undefined behavior.
- return random() % (widthInBits - 1);
- }
struct RotatedImmPtr {
RotatedImmPtr(uintptr_t v1, uint8_t v2)
@@ -1310,7 +1303,7 @@
RotatedImmPtr rotationBlindConstant(ImmPtr imm)
{
- uint8_t rotation = generateRotationSeed(sizeof(void*) * 8);
+ uint8_t rotation = random() % (sizeof(void*) * 8);
uintptr_t value = imm.asTrustedImmPtr().asIntptr();
value = (value << rotation) | (value >> (sizeof(void*) * 8 - rotation));
return RotatedImmPtr(value, rotation);
@@ -1378,7 +1371,7 @@
RotatedImm64 rotationBlindConstant(Imm64 imm)
{
- uint8_t rotation = generateRotationSeed(sizeof(int64_t) * 8);
+ uint8_t rotation = random() % (sizeof(int64_t) * 8);
uint64_t value = imm.asTrustedImm64().m_value;
value = (value << rotation) | (value >> (sizeof(int64_t) * 8 - rotation));
return RotatedImm64(value, rotation);
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
