Title: [240448] trunk/Source/_javascript_Core
- Revision
- 240448
- Author
- [email protected]
- Date
- 2019-01-24 14:07:33 -0800 (Thu, 24 Jan 2019)
Log Message
Update ARM64EHash
https://bugs.webkit.org/show_bug.cgi?id=193776
<rdar://problem/47526457>
Reviewed by Mark Lam.
See radar for details.
* assembler/AssemblerBuffer.h:
(JSC::ARM64EHash::update):
(JSC::ARM64EHash::finalHash const):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (240447 => 240448)
--- trunk/Source/_javascript_Core/ChangeLog 2019-01-24 21:30:55 UTC (rev 240447)
+++ trunk/Source/_javascript_Core/ChangeLog 2019-01-24 22:07:33 UTC (rev 240448)
@@ -1,5 +1,19 @@
2019-01-24 Saam Barati <[email protected]>
+ Update ARM64EHash
+ https://bugs.webkit.org/show_bug.cgi?id=193776
+ <rdar://problem/47526457>
+
+ Reviewed by Mark Lam.
+
+ See radar for details.
+
+ * assembler/AssemblerBuffer.h:
+ (JSC::ARM64EHash::update):
+ (JSC::ARM64EHash::finalHash const):
+
+2019-01-24 Saam Barati <[email protected]>
+
Object Allocation Sinking phase can move a node that walks the stack into a place where the InlineCallFrame is no longer valid
https://bugs.webkit.org/show_bug.cgi?id=193751
<rdar://problem/47280215>
Modified: trunk/Source/_javascript_Core/assembler/AssemblerBuffer.h (240447 => 240448)
--- trunk/Source/_javascript_Core/assembler/AssemblerBuffer.h 2019-01-24 21:30:55 UTC (rev 240447)
+++ trunk/Source/_javascript_Core/assembler/AssemblerBuffer.h 2019-01-24 22:07:33 UTC (rev 240448)
@@ -155,7 +155,7 @@
uint64_t input = value ^ m_hash;
uint64_t a = static_cast<uint32_t>(tagInt(input, static_cast<PtrTag>(0)) >> 39);
uint64_t b = tagInt(input, static_cast<PtrTag>(0xb7e151628aed2a6a)) >> 23;
- m_hash = a | b;
+ m_hash = a ^ b;
}
uint32_t finalHash() const
{
@@ -162,7 +162,7 @@
uint64_t hash = m_hash;
uint64_t a = static_cast<uint32_t>(tagInt(hash, static_cast<PtrTag>(0xbf7158809cf4f3c7)) >> 39);
uint64_t b = tagInt(hash, static_cast<PtrTag>(0x62e7160f38b4da56)) >> 23;
- return static_cast<uint32_t>(a | b);
+ return static_cast<uint32_t>(a ^ b);
}
private:
uint32_t m_hash { 0 };
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes