Title: [224501] branches/safari-604.4.7.10-branch/Source/_javascript_Core
- Revision
- 224501
- Author
- jmarc...@apple.com
- Date
- 2017-11-06 11:29:40 -0800 (Mon, 06 Nov 2017)
Log Message
Cherry-pick r224426. rdar://problem/35364690
Modified Paths
Diff
Modified: branches/safari-604.4.7.10-branch/Source/_javascript_Core/ChangeLog (224500 => 224501)
--- branches/safari-604.4.7.10-branch/Source/_javascript_Core/ChangeLog 2017-11-06 19:27:28 UTC (rev 224500)
+++ branches/safari-604.4.7.10-branch/Source/_javascript_Core/ChangeLog 2017-11-06 19:29:40 UTC (rev 224501)
@@ -1,3 +1,20 @@
+2017-11-06 Jason Marcell <jmarc...@apple.com>
+
+ Cherry-pick r224426. rdar://problem/35364690
+
+ 2017-11-03 Michael Saboff <msab...@apple.com>
+
+ The Abstract Interpreter needs to change similar to clobberize() in r224366
+ https://bugs.webkit.org/show_bug.cgi?id=179267
+
+ Reviewed by Saam Barati.
+
+ Add clobberWorld() to HasGenericProperty, HasStructureProperty & GetPropertyEnumerator
+ cases in the abstract interpreter to match what was done for r224366.
+
+ * dfg/DFGAbstractInterpreterInlines.h:
+ (JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
+
2017-11-05 Jason Marcell <jmarc...@apple.com>
Cherry-pick r224416. rdar://problem/35339831
Modified: branches/safari-604.4.7.10-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h (224500 => 224501)
--- branches/safari-604.4.7.10-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2017-11-06 19:27:28 UTC (rev 224500)
+++ branches/safari-604.4.7.10-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2017-11-06 19:29:40 UTC (rev 224501)
@@ -2864,10 +2864,12 @@
}
case HasGenericProperty: {
forNode(node).setType(SpecBoolean);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case HasStructureProperty: {
forNode(node).setType(SpecBoolean);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case HasIndexedProperty: {
@@ -2894,6 +2896,7 @@
}
case GetPropertyEnumerator: {
forNode(node).setType(m_graph, SpecCell);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case GetEnumeratorStructurePname: {
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
