Closed Bug 465239 Opened 16 years ago Closed 16 years ago

TM: JIT affects ("1e+81" ^ 3)

Categories

(Core :: JavaScript Engine, defect, P1)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect

Tracking

()

Status:
VERIFIED FIXED
Milestone:
mozilla1.9.1b2

People

(Reporter: jruderman, Assigned: gal)

References

Details

(Keywords: testcase, verified1.9.1)

Attachments

(1 file)

patch
1.37 KB, patch
dvander
: review+
Details | Diff | Splinter Review 
js> for (let j = 0; j < 5; ++j) print("" + ("1e+81" ^  3))
3
3
-2147483645
-2147483645
-2147483645
Assignee: general → jwalden+bmo
Assignee: jwalden+bmo → gal
Attached patch patch — — Splinter Review 
Can't bypass the proper ECMA d2i path.
Attachment #348502 - Flags: review?(danderson)
Attachment #348502 - Flags: review?(danderson) → review+
Obscure path as well. Up to sayrer to cherry pick or not.
http://hg.mozilla.org/tracemonkey/rev/026b61f6087a
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Blocks: arithfuzz
We have no idea how obscure this is. I say take it for b2 since it's a one-line fix that matches the non-trace-JITed code.

/be
Severity: normal → critical
Flags: blocking1.9.1?
Priority: -- → P1
Target Milestone: --- → mozilla1.9.1b2
reopening, marking blocking beta2, will close once landed on m-c.
Status: RESOLVED → REOPENED
Flags: blocking1.9.1? → blocking1.9.1+
Resolution: FIXED → ---
Fixed in the merge pushed by vlad on Nov 18 14:11:14 2008 -0800:
http://hg.mozilla.org/mozilla-central/rev/e8ed5d4bf531
Status: REOPENED → RESOLVED
Closed: 16 years ago → 16 years ago
Resolution: --- → FIXED
testStringToInt32 already in js1_8_1/trace/trace-test.js
Flags: in-testsuite+
Flags: in-litmus-
v 1.9.1, 1.9.2
Status: RESOLVED → VERIFIED
Keywords: fixed1.9.1 → verified1.9.1
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: