Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 0aa3e359ab03198c250afecead9196d4e1d7fd2b
https://github.com/WebKit/WebKit/commit/0aa3e359ab03198c250afecead9196d4e1d7fd2b
Author: Yusuke Suzuki <[email protected]>
Date: 2022-12-13 (Tue, 13 Dec 2022)
Changed paths:
M Source/JavaScriptCore/assembler/MacroAssemblerX86_64.h
M Source/JavaScriptCore/b3/air/AirOpcode.opcodes
M Source/JavaScriptCore/wasm/WasmAirIRGenerator64.cpp
Log Message:
-----------
[JSC] Fix x64 CompareIntegerVector
https://bugs.webkit.org/show_bug.cgi?id=249288
rdar://103335482
Reviewed by Mark Lam.
This patch fixes a bug in x64 CompareIntegerVector, where it does noot account
the cases where the left,
right, and dest registers may be the same: specifically, the left == dest, or
right == dest, or left == right == dest cases.
We add scratch register to fix this.
* Source/JavaScriptCore/assembler/MacroAssemblerX86_64.h:
(JSC::MacroAssemblerX86_64::compareIntegerVector):
* Source/JavaScriptCore/b3/air/AirOpcode.opcodes:
* Source/JavaScriptCore/wasm/WasmAirIRGenerator64.cpp:
(JSC::Wasm::AirIRGenerator64::addSIMDRelOp):
(JSC::Wasm::AirIRGenerator64::addConstant):
Canonical link: https://commits.webkit.org/257835@main
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
