Title: [284810] branches/safari-612-branch/Source/_javascript_Core
- Revision
- 284810
- Author
- [email protected]
- Date
- 2021-10-25 12:10:06 -0700 (Mon, 25 Oct 2021)
Log Message
Cherry-pick r284623. rdar://problem/84375007
Add missing overflow check to DFGIntegerRangeOptimizationPhase::filterConstant()
https://bugs.webkit.org/show_bug.cgi?id=232058
Reviewed by Robin Morisset.
Added overflow check.
* dfg/DFGIntegerRangeOptimizationPhase.cpp:
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@284623 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Modified Paths
Diff
Modified: branches/safari-612-branch/Source/_javascript_Core/ChangeLog (284809 => 284810)
--- branches/safari-612-branch/Source/_javascript_Core/ChangeLog 2021-10-25 19:10:03 UTC (rev 284809)
+++ branches/safari-612-branch/Source/_javascript_Core/ChangeLog 2021-10-25 19:10:06 UTC (rev 284810)
@@ -1,5 +1,32 @@
2021-10-25 Null <[email protected]>
+ Cherry-pick r284623. rdar://problem/84375007
+
+ Add missing overflow check to DFGIntegerRangeOptimizationPhase::filterConstant()
+ https://bugs.webkit.org/show_bug.cgi?id=232058
+
+ Reviewed by Robin Morisset.
+
+ Added overflow check.
+
+ * dfg/DFGIntegerRangeOptimizationPhase.cpp:
+
+
+ git-svn-id: https://svn.webkit.org/repository/webkit/trunk@284623 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+ 2021-10-21 Michael Saboff <[email protected]>
+
+ Add missing overflow check to DFGIntegerRangeOptimizationPhase::filterConstant()
+ https://bugs.webkit.org/show_bug.cgi?id=232058
+
+ Reviewed by Robin Morisset.
+
+ Added overflow check.
+
+ * dfg/DFGIntegerRangeOptimizationPhase.cpp:
+
+2021-10-25 Null <[email protected]>
+
Cherry-pick r284585. rdar://problem/84338648
[JSC] ArithAbs should care about INT32_MIN
Modified: branches/safari-612-branch/Source/_javascript_Core/dfg/DFGIntegerRangeOptimizationPhase.cpp (284809 => 284810)
--- branches/safari-612-branch/Source/_javascript_Core/dfg/DFGIntegerRangeOptimizationPhase.cpp 2021-10-25 19:10:03 UTC (rev 284809)
+++ branches/safari-612-branch/Source/_javascript_Core/dfg/DFGIntegerRangeOptimizationPhase.cpp 2021-10-25 19:10:06 UTC (rev 284810)
@@ -568,6 +568,9 @@
switch (other.m_kind) {
case Equal:
+ if (differenceOverflows<int>(otherEffectiveRight, thisRight))
+ return *this;
+
// Return a version of *this that is Equal to other's constant.
return Relationship(m_left, m_right, Equal, otherEffectiveRight - thisRight);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
