Title: [97005] trunk/Source/_javascript_Core
- Revision
- 97005
- Author
- fpi...@apple.com
- Date
- 2011-10-08 01:15:53 -0700 (Sat, 08 Oct 2011)
Log Message
DFG JIT - only Array predictions can result in unboxed cells in register file
https://bugs.webkit.org/show_bug.cgi?id=69695
Patch by Yuqiang Xian <yuqiang.x...@intel.com> on 2011-10-08
Reviewed by Filip Pizlo.
In current DFG JIT, only array predictions can result in unboxed cells
in register file, not for the other cell predictions.
* dfg/DFGSpeculativeJIT.h:
(JSC::DFG::ValueSource::forPrediction):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (97004 => 97005)
--- trunk/Source/_javascript_Core/ChangeLog 2011-10-08 07:31:44 UTC (rev 97004)
+++ trunk/Source/_javascript_Core/ChangeLog 2011-10-08 08:15:53 UTC (rev 97005)
@@ -1,3 +1,16 @@
+2011-10-08 Yuqiang Xian <yuqiang.x...@intel.com>
+
+ DFG JIT - only Array predictions can result in unboxed cells in register file
+ https://bugs.webkit.org/show_bug.cgi?id=69695
+
+ Reviewed by Filip Pizlo.
+
+ In current DFG JIT, only array predictions can result in unboxed cells
+ in register file, not for the other cell predictions.
+
+ * dfg/DFGSpeculativeJIT.h:
+ (JSC::DFG::ValueSource::forPrediction):
+
2011-10-07 Yuqiang Xian <yuqiang.x...@intel.com>
bug fixes for ArrayPush and ArrayPop in 32_64 DFG JIT
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h (97004 => 97005)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h 2011-10-08 07:31:44 UTC (rev 97004)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h 2011-10-08 08:15:53 UTC (rev 97005)
@@ -98,7 +98,7 @@
{
if (isInt32Prediction(prediction))
return ValueSource(Int32InRegisterFile);
- if (isCellPrediction(prediction))
+ if (isArrayPrediction(prediction))
return ValueSource(CellInRegisterFile);
return ValueSource(ValueInRegisterFile);
}
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
http://lists.webkit.org/mailman/listinfo.cgi/webkit-changes
