Incorrect number with ^ (int-double confusion?)

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
9 years ago
9 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug, {testcase})

Trunk
x86
Mac OS X
testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

9 years ago
var a = 0;
var i = 0;
for each (let e in ['', 0, {}, '', '' ,'']) {
    a ^= 0;
    if (i == 1) {
        a = 0x80000001;
    }
    for each (let r in [.5, .5]) { }
    ++i;
}
print(a);

Without JIT: -2147483647
With JIT:    -4194304

Thanks to Gary for finding and partially reducing.
Jesse, this looks fixed with the patch in bug 502604. Can you confirm?

Comment 2

9 years ago
Just as I was complaining about fuzzer not hitting it ... great job jesse & gary.
(Reporter)

Comment 3

9 years ago
Yep, the patch in bug 502604 fixes this.
(In reply to comment #3)
> Yep, the patch in bug 502604 fixes this.

Confirming fixed by bug 502604.
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → FIXED
Flags: in-testsuite?
You need to log in before you can comment on or make changes to this bug.