commit 6b88e39e7e2ac401ede270ee2bcbe1d625e8de90
author fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Sat Dec 10 02:15:39 2011 +0000
committer fpizlo@apple.com <fpizlo@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Sat Dec 10 02:15:39 2011 +0000
tree ae10d1526b1d3c36d44d8a700057d9a4e316b5a8
parent a55d35ef668623b51750ea08ddca2ab0ab295294

DFG ArithMul power-of-two case does not check for overflow
https://bugs.webkit.org/show_bug.cgi?id=74230

Source/JavaScriptCore: 

Reviewed by Gavin Barraclough.
        
Disabled power-of-2 peephole optimization for multiplication, because it was wrong,
and any attempt to fix it would likely introduce code bloat and register pressure.

* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::compileArithMul):

LayoutTests: 

Reviewed by Gavin Barraclough.

* fast/js/dfg-multiply-expected.txt: Added.
* fast/js/dfg-multiply.html: Added.
* fast/js/script-tests/dfg-multiply.js: Added.
(doMultiplyConstant2):
(doMultiplyConstant3):
(doMultiplyConstant4):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@102509 268f45cc-cd09-0410-ab3c-d52691b4dbfc