Changeset 167382 in webkit for trunk/Source/JavaScriptCore/runtime/JSCJSValueInlines.h

Timestamp:

Apr 16, 2014, 1:54:43 PM (11 years ago)

Author:

[email protected]

Message:

Fix JSC Debug Regressions on Windows
​https://bugs.webkit.org/show_bug.cgi?id=131182

Patch by ​[email protected] <​[email protected]> on 2014-04-16
Reviewed by Brent Fulgham.

The cast static_cast<int64_t>(number) in JSValue::isMachineInt() can generate a floating point error,
and set the st floating point register tags, if the value of the number parameter is infinite.
If the st floating point register tags are not cleared, this can cause strange floating point behavior later on.
This can be avoided by checking for infinity first.

• runtime/JSCJSValueInlines.h:

(JSC::JSValue::isMachineInt): Avoid floating point error by checking for infinity first.

• runtime/Options.cpp:

(JSC::recomputeDependentOptions): Re-enable jit for Windows.

File:

• trunk/Source/JavaScriptCore/runtime/JSCJSValueInlines.h (modified) (1 diff)

trunk/Source/JavaScriptCore/runtime/JSCJSValueInlines.h

@@ -505 +505 @@
     if (number != number)
         return false;
+#if OS(WINDOWS)
+    // Need to check for infinity on Windows to avoid floating point error on following cast, see bug 131182.
+    if (std::isinf(number))
+        return false;
+#endif
     int64_t asInt64 = static_cast<int64_t>(number);
     if (asInt64 != number)