diff options
| author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2019-01-15 10:21:51 +0100 |
|---|---|---|
| committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2019-03-29 09:55:12 +0000 |
| commit | 195a52f52b31da5529d6bba21960e36952b0ab73 (patch) | |
| tree | ac01271e093118e8f9bb4650822a7112dbd7b187 | |
| parent | 532f1de0471285729c3fbf8936f3b1a4db667fb5 (diff) | |
| download | qtwebengine-chromium-195a52f52b31da5529d6bba21960e36952b0ab73.tar.gz | |
[Backport] Security bug 880207
Merged: [turbofan] Fix Math.expm1 builtin typing.
Revision: c59c9c46b589deb2a41ba07cf87275921b8b2885
BUG=chromium:880207
LOG=N
NOTRY=true
NOPRESUBMIT=true
NOTREECHECKS=true
TBR=jarin@chromium.org
Change-Id: I453d23ff1bfe355c792b39d7e69d48cc5414cd47
Reviewed-on: https://chromium-review.googlesource.com/c/1316047
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Benedikt Meurer <bmeurer@chromium.org>
Cr-Commit-Position: refs/branch-heads/7.1@{#32}
Cr-Branched-From: f70aaa8ab2e8815505a6145c745e50d8328cd28c-refs/heads/7.1.302@{#1}
Cr-Branched-From: 1dbcc78efa17a9047f7e923958087ef9eec43066-refs/heads/master@{#56462}
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
| -rw-r--r-- | chromium/v8/src/compiler/typer.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/v8/src/compiler/typer.cc b/chromium/v8/src/compiler/typer.cc index 2642a1007a4..6e63df50403 100644 --- a/chromium/v8/src/compiler/typer.cc +++ b/chromium/v8/src/compiler/typer.cc @@ -1312,7 +1312,6 @@ Type* Typer::Visitor::JSCallFunctionTyper(Type* fun, Typer* t) { // Unary math functions. case kMathAbs: case kMathExp: - case kMathExpm1: return Type::Union(Type::PlainNumber(), Type::NaN(), t->zone()); case kMathAcos: case kMathAcosh: @@ -1322,6 +1321,7 @@ Type* Typer::Visitor::JSCallFunctionTyper(Type* fun, Typer* t) { case kMathAtanh: case kMathCbrt: case kMathCos: + case kMathExpm1: case kMathFround: case kMathLog: case kMathLog1p: |