commit 678cd6fbaaadf48926780ddbfab8bedf2a9536df
author fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Mon Dec 12 22:13:35 2011 +0000
committer fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Mon Dec 12 22:13:35 2011 +0000
tree e00b2180c7359fe0866a5b667178f5dd840a5bcd
parent e288d5b38b72cf2757272f37add7ecd622e8e3a4

DFG GetByVal CSE incorrectly assumes that a non-matching PutByVal cannot clobber
https://bugs.webkit.org/show_bug.cgi?id=74329

Reviewed by Gavin Barraclough.

Source/JavaScriptCore: 

* dfg/DFGPropagator.cpp:
(JSC::DFG::Propagator::getByValLoadElimination):

LayoutTests: 

* fast/js/dfg-get-by-val-clobber-expected.txt: Added.
* fast/js/dfg-get-by-val-clobber.html: Added.
* fast/js/script-tests/dfg-get-by-val-clobber.js: Added.
(doAccesses):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@102623 268f45cc-cd09-0410-ab3c-d52691b4dbfc