Closed Bug 465234 Opened 17 years ago Closed 17 years ago

TM: JIT affects truthiness of ("" <= null)

Categories

(Core :: JavaScript Engine, defect, P1)

x86
macOS
defect

Tracking

()

VERIFIED FIXED
mozilla1.9.1b2

People

(Reporter: jruderman, Assigned: gal)

References

Details

(Keywords: testcase, verified1.9.1)

Attachments

(1 file)

js> for (let j = 0; j < 5; ++j) print("" + ("" <= null)); true true false false false
Assignee: general → gal
Attached patch patchSplinter Review
Restrict the shortcut case to == and !=. Its not accurate for relational comparisons.
Attachment #348495 - Flags: review?
Attachment #348495 - Attachment is patch: true
Attachment #348495 - Attachment mime type: application/octet-stream → text/plain
Attachment #348495 - Flags: review? → review?(jwalden+bmo)
Attachment #348495 - Flags: review?(jwalden+bmo) → review+
http://hg.mozilla.org/tracemonkey/rev/56aa39e5c071 Pushed to TM. No blocker IMO since its a rare odd case, but sayrer's call.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Blocks: arithfuzz
(In reply to comment #2) > http://hg.mozilla.org/tracemonkey/rev/56aa39e5c071 > > Pushed to TM. No blocker IMO since its a rare odd case, but sayrer's call. I have no idea if this is important for b2 but it could be, and the fix is safe (conservative: abort on string RELOP non-string and vice versa). /be
Severity: normal → critical
Flags: blocking1.9.1?
Priority: -- → P1
Target Milestone: --- → mozilla1.9.1b2
reopening, marking blocking beta2, will close once landed on m-c.
Status: RESOLVED → REOPENED
Flags: blocking1.9.1? → blocking1.9.1+
Resolution: FIXED → ---
Fixed in the merge pushed by vlad on Nov 18 14:11:14 2008 -0800: http://hg.mozilla.org/mozilla-central/rev/e8ed5d4bf531
Status: REOPENED → RESOLVED
Closed: 17 years ago17 years ago
Resolution: --- → FIXED
Flags: in-testsuite+
Flags: in-litmus-
v 1.9.1, 1.9.2
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: