Title: [153675] branches/safari-537-branch/Source/_javascript_Core/dfg/DFGAbstractState.cpp
- Revision
- 153675
- Author
- lforsch...@apple.com
- Date
- 2013-08-02 16:09:54 -0700 (Fri, 02 Aug 2013)
Log Message
Apply patch from <rdar://problem/14580940>.
Modified Paths
Diff
Modified: branches/safari-537-branch/Source/_javascript_Core/dfg/DFGAbstractState.cpp (153674 => 153675)
--- branches/safari-537-branch/Source/_javascript_Core/dfg/DFGAbstractState.cpp 2013-08-02 22:38:28 UTC (rev 153674)
+++ branches/safari-537-branch/Source/_javascript_Core/dfg/DFGAbstractState.cpp 2013-08-02 23:09:54 UTC (rev 153675)
@@ -1078,10 +1078,9 @@
clobberWorld(node->codeOrigin, indexInBlock);
SpeculatedType type = source.m_type;
- if (type & ~(SpecNumber | SpecString | SpecBoolean)) {
- type &= (SpecNumber | SpecString | SpecBoolean);
- type |= SpecString;
- }
+ if (type & ~(SpecNumber | SpecString | SpecBoolean))
+ type = (SpecTop & ~SpecCell) | SpecString;
+
destination.set(type);
break;
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes