Title: [205882] trunk/Source/_javascript_Core
- Revision
- 205882
- Author
- [email protected]
- Date
- 2016-09-13 15:16:25 -0700 (Tue, 13 Sep 2016)
Log Message
DFG NewArrayBuffer node should watch for "have a bad time" state change.
https://bugs.webkit.org/show_bug.cgi?id=161927
<rdar://problem/27995222>
Reviewed by Geoffrey Garen.
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (205881 => 205882)
--- trunk/Source/_javascript_Core/ChangeLog 2016-09-13 21:56:55 UTC (rev 205881)
+++ trunk/Source/_javascript_Core/ChangeLog 2016-09-13 22:16:25 UTC (rev 205882)
@@ -1,3 +1,14 @@
+2016-09-13 Mark Lam <[email protected]>
+
+ DFG NewArrayBuffer node should watch for "have a bad time" state change.
+ https://bugs.webkit.org/show_bug.cgi?id=161927
+ <rdar://problem/27995222>
+
+ Reviewed by Geoffrey Garen.
+
+ * dfg/DFGFixupPhase.cpp:
+ (JSC::DFG::FixupPhase::fixupNode):
+
2016-09-13 JF Bastien <[email protected]>
Support jsc shell builtin `read`
Modified: trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp (205881 => 205882)
--- trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2016-09-13 21:56:55 UTC (rev 205881)
+++ trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2016-09-13 22:16:25 UTC (rev 205882)
@@ -1096,6 +1096,11 @@
break;
}
+ case NewArrayBuffer: {
+ watchHavingABadTime(node);
+ break;
+ }
+
case CallObjectConstructor: {
if (node->child1()->shouldSpeculateObject()) {
fixEdge<ObjectUse>(node->child1());
@@ -1614,7 +1619,6 @@
case ForwardVarargs:
case ProfileControlFlow:
case NewObject:
- case NewArrayBuffer:
case NewRegexp:
case DeleteById:
case DeleteByVal:
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
