Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 3fcedc7fe6c82ffdda06219e621b38dda67bdf58
https://github.com/WebKit/WebKit/commit/3fcedc7fe6c82ffdda06219e621b38dda67bdf58
Author: Mikhail R. Gadelha <[email protected]>
Date: 2025-10-14 (Tue, 14 Oct 2025)
Changed paths:
M Source/JavaScriptCore/wasm/WasmBBQJIT32_64.cpp
Log Message:
-----------
[JSC][32-bit] Fix missing move when shift == 0 in BBQ
https://bugs.webkit.org/show_bug.cgi?id=300509
Reviewed by Justin Michaud.
In shiftI64Helper, we would check if the shift amount was zero and just jump to
the end, without moving the lhs to the result.
No new tests, but this was found when analysing the crash in JetStream3's
tfjs-wasm.js. 32-bit JSC still crashes when running that test but this gets us
a little bit further.
* Source/JavaScriptCore/wasm/WasmBBQJIT32_64.cpp:
(JSC::Wasm::BBQJITImpl::BBQJIT::shiftI64Helper):
Canonical link: https://commits.webkit.org/301475@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
