[turbofan] Handle Type::None() in SameValue

nico-hartmann · V8 LUCI CQ · commit f784b0b05be9 · 2024-08-20T15:16:16.000Z
Bug: chromium:351865302 Change-Id: Ibab11d8a68fe7c55113abf31c090fd66b3ff0542 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5797195 Reviewed-by: Matthias Liedtke <mliedtke@chromium.org> Commit-Queue: Nico Hartmann <nicohartmann@chromium.org> Commit-Queue: Matthias Liedtke <mliedtke@chromium.org> Auto-Submit: Nico Hartmann <nicohartmann@chromium.org> Cr-Commit-Position: refs/heads/main@{#95728}
diff --git a/src/compiler/operation-typer.cc b/src/compiler/operation-typer.cc
@@ -1259,6 +1259,7 @@ Type JSType(Type type) {
 }  // namespace
 
 Type OperationTyper::SameValue(Type lhs, Type rhs) {
+  if (lhs.IsNone() || rhs.IsNone()) return Type::None();
   if (!JSType(lhs).Maybe(JSType(rhs))) return singleton_false();
   if (lhs.Is(Type::NaN())) {
     if (rhs.Is(Type::NaN())) return singleton_true();
