Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: f7026fa96bc792879d0e9f2bd3b96bf8284e8f72
https://github.com/WebKit/WebKit/commit/f7026fa96bc792879d0e9f2bd3b96bf8284e8f72
Author: Yusuke Suzuki <[email protected]>
Date: 2026-06-17 (Wed, 17 Jun 2026)
Changed paths:
M Source/JavaScriptCore/bytecode/BytecodeList.rb
M Source/JavaScriptCore/bytecode/Opcode.h
M Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h
M Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp
M Source/JavaScriptCore/runtime/CommonSlowPaths.cpp
Log Message:
-----------
[JSC] Profile op_unsigned overflow in LLInt / Baseline
https://bugs.webkit.org/show_bug.cgi?id=317358
rdar://179972217
Reviewed by Keith Miller.
We found that op_unsigned Overflow extension is largely relying on DFG
OSR exit. But we should collect this information in LLInt / Baseline
instead.
This patch adds UnaryArithProfile to op_unsigned and collecting these
information. And then propagating it in DFG.
* Source/JavaScriptCore/bytecode/BytecodeList.rb:
* Source/JavaScriptCore/bytecode/Opcode.h:
* Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h:
(JSC::BytecodeGenerator::emitUnaryOp):
* Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::makeSafe):
* Source/JavaScriptCore/runtime/CommonSlowPaths.cpp:
(JSC::JSC_DEFINE_COMMON_SLOW_PATH):
Canonical link: https://commits.webkit.org/315430@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
