Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(36)

Issue 216823005: Make sure value is a heap number when reusing the double box in BinaryOpICStub. (Closed)

Created:
6 years, 8 months ago by Hannes Payer (out of office)
Modified:
6 years, 8 months ago
CC:
v8-dev
Visibility:
Public.

Description

Make sure value is a heap number when reusing the double box in BinaryOpICStub. BUG= R=mstarzinger@chromium.org Committed: https://code.google.com/p/v8/source/detail?r=20501

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+15 lines, -18 lines) Patch
M src/code-stubs-hydrogen.cc View 1 chunk +1 line, -1 line 0 comments Download
A + test/mjsunit/regress/regress-359525.js View 1 chunk +14 lines, -17 lines 0 comments Download

Messages

Total messages: 4 (0 generated)
Hannes Payer (out of office)
6 years, 8 months ago (2014-04-03 17:12:37 UTC) #1
Michael Starzinger
LGTM.
6 years, 8 months ago (2014-04-04 08:42:21 UTC) #2
Hannes Payer (out of office)
Committed patchset #1 manually as r20501 (presubmit successful).
6 years, 8 months ago (2014-04-04 08:46:57 UTC) #3
Toon Verwaest
6 years, 8 months ago (2014-04-04 09:03:38 UTC) #4
Message was sent while issue was closed.
This fix fixes the mutation problem, however it does not fix the double-run
problem afaict. It could be that the operand is indeed a number, but that the
second operand which used to be a number, is now a string. That would cause a
deopt due to string->number conversion while trying to save, causing the op to
be executed twice.

Powered by Google App Engine
This is Rietveld 408576698