Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: a73d24da9011cb4f65f9b43d3f958d7eff9c6c9a
https://github.com/WebKit/WebKit/commit/a73d24da9011cb4f65f9b43d3f958d7eff9c6c9a
Author: Shu-yu Guo <[email protected]>
Date: 2026-03-11 (Wed, 11 Mar 2026)
Changed paths:
M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp
Log Message:
-----------
[JSC] Store float instead of double for F32 in OMG tail calls
https://bugs.webkit.org/show_bug.cgi?id=304032
rdar://166285942
Reviewed by Dan Hecht and Mark Lam.
F32 and F64 were both doing a double store when spilling in OMG tail calls,
while F32 should be doing a float store to avoid writing out of bounds of the
spill slot.
No test as cannot reliably and observably test this temporary stack corruption.
Originally-landed-as: 301765.371@safari-7623-branch (167074a8e936).
rdar://171558829
Canonical link: https://commits.webkit.org/309067@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
