v8/test/mjsunit/asm
Michael Starzinger a3a0f80de9 [asm.js] Fix load type of {Float32Array} and {Float64Array}.
This makes sure that the return type of the aforementioned heap views is
always {float?} and {double?} respectively, independent of the type of
the value passed to the store. It fixes validation failures due to bogus
(and redundant) conversion expressions being emitted.

R=clemensb@chromium.org
TEST=mjsunit/asm/regress-1027595
BUG=chromium:1027595

Change-Id: I037613afc643ac1b04ae4a943e42dc1823ad5bdf
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1932374
Reviewed-by: Clemens Backes <clemensb@chromium.org>
Commit-Queue: Michael Starzinger <mstarzinger@chromium.org>
Cr-Commit-Position: refs/heads/master@{#65151}
2019-11-25 14:47:08 +00:00
..
embenchen
poppler
sqlite3
asm-heap.js Reland "[asmjs] Properly validate asm.js heap sizes" 2018-08-21 09:00:04 +00:00
asm-memory.js
asm-stdlib.js
asm-validation.js
atomics-add.js
atomics-and.js
atomics-compareexchange.js
atomics-exchange.js
atomics-load.js
atomics-or.js
atomics-store.js
atomics-sub.js
atomics-xor.js
b5528-comma.js
call-annotation.js
call-collisions.js
call-stdlib.js
do-while-false.js
do-while.js
float32array-negative-offset.js
float32array-outofbounds.js
float32array-store-div.js
float64array-negative-offset.js
float64array-outofbounds.js
float64array-store-div.js
float64mul.js
global-imports.js
if-cloning.js
if-folding.js
if-reduction.js
if-tonumber.js
immutable.js
infinite-loops-taken.js
infinite-loops.js
int8array-negative-offset.js
int16array-negative-offset.js
int16array-outofbounds.js
int32-div.js
int32-mod.js
int32-mul.js
int32-tmod.js
int32-udiv.js
int32-umod.js
int32array-constant-key.js
int32array-negative-offset.js
int32array-outofbounds.js
int32array-unaligned.js
int32div.js
int32mod-constant.js
int32mod.js
int32modb.js
load-elimination.js
math-abs.js
math-ceil.js
math-clz32.js
math-floor.js
math-fround.js
math-max.js
math-min.js
noexpose-wasm.js
pointer-masking.js
redundancy1.js
redundancy2.js
regress-9531.js [arraybuffer] Use relaxed load/store for bitfield 2019-07-23 10:12:26 +00:00
regress-641885.js
regress-660813.js
regress-669899.js
regress-672045.js
regress-674089.js
regress-676573.js
regress-681707.js
regress-718745.js
regress-719866.js
regress-740325.js
regress-913822.js [asm.js] Fix semicolon insertion in presence of comments. 2018-12-12 14:43:05 +00:00
regress-920076.js [asm.js] Fix semicolon insertion in presence of Unicode. 2019-01-09 12:38:41 +00:00
regress-937650.js [asm.js] Fix undefined behavior with float32 constants. 2019-03-07 08:56:37 +00:00
regress-1013920.js [asmjs] Disallow AsmJs instantiation from a SharedArrayBuffer. 2019-10-15 12:45:29 +00:00
regress-1027595.js [asm.js] Fix load type of {Float32Array} and {Float64Array}. 2019-11-25 14:47:08 +00:00
return-types.js
sign-extend.js
switch.js
uint8array-outofbounds.js
uint32-less-than-shift.js
uint32div.js
uint32mod-constant.js
uint32mod.js
word32and.js
word32ror.js
zero-extend.js