| commit | b8b6075021ade0969c6b8de9459cd34163f7dbe1 | [log] [tgz] |
|---|---|---|
| author | Mike Stanton <mvstanton@chromium.org> | Mon Dec 02 14:30:47 2019 |
| committer | Commit Bot <commit-bot@chromium.org> | Mon Dec 02 15:20:52 2019 |
| tree | 8ac7a12389ceed9704bee43d8bb1afbaeee7e1f0 | |
| parent | 0da7ca8781c6c7ec852bef845b72ca7f212cdc23 [diff] |
[TurboFan] Loop variable analysis requires more sensitivity Loop variable analysis doesn't recognize that the initial type of the loop variable phi combined with the increment type may produce a NaN result through the addition of two infinities of differing sign. This leads to unreachable code and a SIGINT crash. The fix is to consider this case before typing the loop variable phi, falling back to more conservative typing if discovered. R=neis@chromium.org Bug: chromium:1028863 Change-Id: Ic4b5189c4c50c5bbe29e46050de630fd0673de9f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1946352 Commit-Queue: Michael Stanton <mvstanton@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#65291}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://v8.dev/docs
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned at v8.dev/docs/contribute.