Skip to content

Commit 948e9fd

Browse files
Dominik KlembaV8-internal LUCI CQ
authored andcommitted
[bugfix] Remove incorrect produced type from the list
We cannot guarantee that `.integer` is produced because the `.length` property could be overwritten, and nothing else produces integers. We don't want `produces: [.jsAnything]` as it doesn't have value. Bug: 470273473 Change-Id: Ib3c78e05ea2845ed3e7966b1e10aaa51f3a0e5b5 Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8911216 Reviewed-by: Matthias Liedtke <mliedtke@google.com> Auto-Submit: Dominik Klemba <tacet@google.com> Commit-Queue: Matthias Liedtke <mliedtke@google.com>
1 parent 972d560 commit 948e9fd

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

Sources/Fuzzilli/CodeGen/CodeGenerators.swift

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -301,8 +301,7 @@ public let CodeGenerators: [CodeGenerator] = [
301301

302302
CodeGenerator("TypedArrayLastIndexGenerator",
303303
inContext: .single(.javascript),
304-
inputs: .required(.object(withProperties: ["buffer", "length"])),
305-
produces: [.integer, .jsAnything]
304+
inputs: .required(.object(withProperties: ["buffer", "length"]))
306305
) { b, view in
307306
let len = b.getProperty("length", of: view)
308307
let index = b.binary(len, b.loadInt(1), with: .Sub)

0 commit comments

Comments
 (0)