Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 472bc719b29b73c49fc7e901d773666403078d16
https://github.com/WebKit/WebKit/commit/472bc719b29b73c49fc7e901d773666403078d16
Author: Yusuke Suzuki <[email protected]>
Date: 2025-04-22 (Tue, 22 Apr 2025)
Changed paths:
A JSTests/stress/string-value-of-should-throw-error-for-undefined.js
M Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h
M Source/JavaScriptCore/dfg/DFGClobberize.h
M Source/JavaScriptCore/dfg/DFGFixupPhase.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
Log Message:
-----------
[JSC] Type checking error after JIT optimization
https://bugs.webkit.org/show_bug.cgi?id=291362
rdar://149470479
Reviewed by Yijia Huang.
`String#toString` / `String#valueOf` with `undefined` / `null` should
throw an error. Thus, we should not fold it to ToString node with
StringOrOther.
* JSTests/stress/string-value-of-should-throw-error-for-undefined.js: Added.
(shouldBe):
(opt):
* Source/JavaScriptCore/dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupStringValueOf):
Canonical link: https://commits.webkit.org/293973@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
