• Victor Gomes's avatar
    [maglev] Fix float64 add deoptimization · 5f77a1b3
    Victor Gomes authored
    CheckedFloat64Unbox mutates the input value, but the register allocator
    does not expects this behaviour and propagates a wrong value in the register.
    In particular we deopt with the wrong value if the second Float64Unbox
    in a Float64Add needs to deopt.
    
    This fixes the input value after we convert to double.
    
    Bug: v8:7700
    Change-Id: Ib89573e9f728dc3a34b817fc84f1afcb96f14d18
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3610422
    Commit-Queue: Victor Gomes <victorgomes@chromium.org>
    Auto-Submit: Victor Gomes <victorgomes@chromium.org>
    Reviewed-by: 's avatarLeszek Swirski <leszeks@chromium.org>
    Commit-Queue: Leszek Swirski <leszeks@chromium.org>
    Cr-Commit-Position: refs/heads/main@{#80214}
    5f77a1b3
Name
Last commit
Last update
..
benchmarks Loading commit data...
bigint Loading commit data...
cctest Loading commit data...
common Loading commit data...
debugger Loading commit data...
debugging Loading commit data...
fuzzer Loading commit data...
fuzzilli Loading commit data...
inspector Loading commit data...
intl Loading commit data...
js-perf-test Loading commit data...
memory Loading commit data...
message Loading commit data...
mjsunit Loading commit data...
mkgrokdump Loading commit data...
mozilla Loading commit data...
test262 Loading commit data...
torque Loading commit data...
unittests Loading commit data...
wasm-api-tests Loading commit data...
wasm-js Loading commit data...
wasm-spec-tests Loading commit data...
webkit Loading commit data...
BUILD.gn Loading commit data...
OWNERS Loading commit data...