Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ab0808f76fdb011db0cb037137d236849534ac26
https://github.com/WebKit/WebKit/commit/ab0808f76fdb011db0cb037137d236849534ac26
Author: Mark Lam <[email protected]>
Date: 2023-12-05 (Tue, 05 Dec 2023)
Changed paths:
M Source/JavaScriptCore/b3/B3ReduceStrength.cpp
M Source/JavaScriptCore/b3/testb3.h
M Source/JavaScriptCore/b3/testb3_1.cpp
M Source/JavaScriptCore/b3/testb3_7.cpp
Log Message:
-----------
Fix nullptr deref in B3::ReduceStrength's handling of Trunc for double
constants.
https://bugs.webkit.org/show_bug.cgi?id=265730
rdar://116459635
Reviewed by Yusuke Suzuki.
We cannot run asInt64() on a ConstDoubleValue. This patch fixes this by
handling
ConstDoubleValue separately and running asDouble() on it instead.
* Source/JavaScriptCore/b3/B3ReduceStrength.cpp:
Canonical link: https://commits.webkit.org/271580@main
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
