AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

[turbofan] Add re-typing for PlainPrimitiveToNumber during representation inference.

Browse Source 
This makes sure that the uses of PlainPrimitiveToNumber get a more
precise type (so that the uses know how to interpret the output
representation).

BUG=chromium:628516

Review-Url: https://codereview.chromium.org/2151223002
Cr-Commit-Position: refs/heads/master@{#37792}
This commit is contained in:
jarin 2016-07-15 03:37:15 -07:00 committed by Commit bot
parent 54a0389309
commit 9f859c66a1
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/compiler/simplified-lowering.cc
View File

@ -457,6 +457,10 @@ class RepresentationSelector {
break;
}
case IrOpcode::kPlainPrimitiveToNumber:
new_type = op_typer_.ToNumber(FeedbackTypeOf(node->InputAt(0)));
break;
case IrOpcode::kNumberAbs: {
new_type = op_typer_.NumberAbs(FeedbackTypeOf(node->InputAt(0)));
break;

13
test/mjsunit/compiler/regress-628516.js Normal file
View File

@ -0,0 +1,13 @@
// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
function f() {
var i = 0;
while (1) {
if ({}) i = expected[0] == x[0];
i++;
}
}
assertThrows(f);