Title: [227490] releases/WebKitGTK/webkit-2.18/Source/_javascript_Core
- Revision
- 227490
- Author
- [email protected]
- Date
- 2018-01-24 01:37:03 -0800 (Wed, 24 Jan 2018)
Log Message
Merge r224426 - The Abstract Interpreter needs to change similar to clobberize() in r224366
https://bugs.webkit.org/show_bug.cgi?id=179267
Reviewed by Saam Barati.
Add clobberWorld() to HasGenericProperty, HasStructureProperty & GetPropertyEnumerator
cases in the abstract interpreter to match what was done for r224366.
* dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/ChangeLog (227489 => 227490)
--- releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/ChangeLog 2018-01-24 09:36:58 UTC (rev 227489)
+++ releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/ChangeLog 2018-01-24 09:37:03 UTC (rev 227490)
@@ -1,3 +1,16 @@
+2017-11-03 Michael Saboff <[email protected]>
+
+ The Abstract Interpreter needs to change similar to clobberize() in r224366
+ https://bugs.webkit.org/show_bug.cgi?id=179267
+
+ Reviewed by Saam Barati.
+
+ Add clobberWorld() to HasGenericProperty, HasStructureProperty & GetPropertyEnumerator
+ cases in the abstract interpreter to match what was done for r224366.
+
+ * dfg/DFGAbstractInterpreterInlines.h:
+ (JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
+
2017-11-02 Filip Pizlo <[email protected]>
AI does not correctly model the clobber case of ArithClz32
Modified: releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h (227489 => 227490)
--- releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2018-01-24 09:36:58 UTC (rev 227489)
+++ releases/WebKitGTK/webkit-2.18/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2018-01-24 09:37:03 UTC (rev 227490)
@@ -2862,10 +2862,12 @@
}
case HasGenericProperty: {
forNode(node).setType(SpecBoolean);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case HasStructureProperty: {
forNode(node).setType(SpecBoolean);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case HasIndexedProperty: {
@@ -2892,6 +2894,7 @@
}
case GetPropertyEnumerator: {
forNode(node).setType(m_graph, SpecCell);
+ clobberWorld(node->origin.semantic, clobberLimit);
break;
}
case GetEnumeratorStructurePname: {
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
