commit 152abff0839193b17c7ec7cac70a0d5b4cff234d
author fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Tue Jun 19 23:10:12 2012 +0000
committer fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Tue Jun 19 23:10:12 2012 +0000
tree de30388fd3ccc0326484fd17e8e0dfb85f5ce73a
parent a890c6cd50eda4104fbd69b99e71651f57ff388a

DFG CFA forgets to notify subsequent phases of found constants if it proves LogicalNot to be a constant
https://bugs.webkit.org/show_bug.cgi?id=89511
<rdar://problem/11700089>

Reviewed by Geoffrey Garen.

Source/JavaScriptCore: 

* dfg/DFGAbstractState.cpp:
(JSC::DFG::AbstractState::execute):

LayoutTests: 

* fast/js/dfg-constant-fold-logical-not-branch-expected.txt: Added.
* fast/js/dfg-constant-fold-logical-not-branch.html: Added.
* fast/js/script-tests/dfg-constant-fold-logical-not-branch.js: Added.
(foo1):
(foo2):
(Stuff):
(Stuff.prototype.thingy):
(Stuff.prototype.otherThingy):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120767 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Source/JavaScriptCore/dfg/DFGAbstractState.cpp

diff --git a/Source/JavaScriptCore/dfg/DFGAbstractState.cpp b/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
index d7aa275..94e9685 100644
--- a/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
+++ b/Source/JavaScriptCore/dfg/DFGAbstractState.cpp
@@ -592,6 +592,7 @@
         JSValue childConst = forNode(node.child1()).value();
         if (childConst) {
             forNode(nodeIndex).set(jsBoolean(!childConst.toBoolean()));
+            m_foundConstants = true;
             node.setCanExit(false);
             break;
         }