Title: [285314] branches/safari-612-branch/Source/_javascript_Core
Revision
285314
Author
[email protected]
Date
2021-11-04 14:42:57 -0700 (Thu, 04 Nov 2021)

Log Message

Revert "Cherry-pick r284036. rdar://problem/84167629"

This reverts commit r285280.

Modified Paths

Diff

Modified: branches/safari-612-branch/Source/_javascript_Core/ChangeLog (285313 => 285314)


--- branches/safari-612-branch/Source/_javascript_Core/ChangeLog	2021-11-04 21:39:52 UTC (rev 285313)
+++ branches/safari-612-branch/Source/_javascript_Core/ChangeLog	2021-11-04 21:42:57 UTC (rev 285314)
@@ -416,51 +416,6 @@
             (JSC::Wasm::JSC_DEFINE_JIT_OPERATION):
             * wasm/WasmOperations.h:
 
-2021-11-04  Russell Epstein  <[email protected]>
-
-        Cherry-pick r284036. rdar://problem/84167629
-
-    Fix spec-correctness when inlining __proto__ intrinsic using get_by_id_with_this
-    https://bugs.webkit.org/show_bug.cgi?id=231559
-    
-    Reviewed by Yusuke Suzuki.
-    
-    My original fix in r283512 has some theoretical spec correctness issues.
-    I'm not sure if they can be materialized or not since we only use
-    get_by_id_with_this in very limited scenarios. However, this patch just
-    makes it so we call the getter instead of attempting to inline it
-    when using get_by_id_with_this.
-    
-    * jit/AssemblyHelpers.cpp:
-    (JSC::AssemblyHelpers::emitLoadPrototypeWithoutCheck): Deleted.
-    * jit/AssemblyHelpers.h:
-    * jit/IntrinsicEmitter.cpp:
-    (JSC::IntrinsicGetterAccessCase::canEmitIntrinsicGetter):
-    (JSC::IntrinsicGetterAccessCase::emitIntrinsicGetter):
-    
-    
-    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@284036 268f45cc-cd09-0410-ab3c-d52691b4dbfc
-
-    2021-10-12  Saam Barati  <[email protected]>
-
-            Fix spec-correctness when inlining __proto__ intrinsic using get_by_id_with_this
-            https://bugs.webkit.org/show_bug.cgi?id=231559
-
-            Reviewed by Yusuke Suzuki.
-
-            My original fix in r283512 has some theoretical spec correctness issues.
-            I'm not sure if they can be materialized or not since we only use
-            get_by_id_with_this in very limited scenarios. However, this patch just
-            makes it so we call the getter instead of attempting to inline it
-            when using get_by_id_with_this.
-
-            * jit/AssemblyHelpers.cpp:
-            (JSC::AssemblyHelpers::emitLoadPrototypeWithoutCheck): Deleted.
-            * jit/AssemblyHelpers.h:
-            * jit/IntrinsicEmitter.cpp:
-            (JSC::IntrinsicGetterAccessCase::canEmitIntrinsicGetter):
-            (JSC::IntrinsicGetterAccessCase::emitIntrinsicGetter):
-
 2021-10-25  Null  <[email protected]>
 
         Cherry-pick r283600. rdar://problem/84625586

Modified: branches/safari-612-branch/Source/_javascript_Core/jit/IntrinsicEmitter.cpp (285313 => 285314)


--- branches/safari-612-branch/Source/_javascript_Core/jit/IntrinsicEmitter.cpp	2021-11-04 21:39:52 UTC (rev 285313)
+++ branches/safari-612-branch/Source/_javascript_Core/jit/IntrinsicEmitter.cpp	2021-11-04 21:42:57 UTC (rev 285314)
@@ -48,13 +48,6 @@
 
 bool IntrinsicGetterAccessCase::canEmitIntrinsicGetter(JSFunction* getter, Structure* structure)
 {
-    // We aren't structure checking the this value, so we don't know:
-    // - For type array loads, that it's a typed array.
-    // - For __proto__ getter, that the incoming value is an object,
-    //   and if it overrides getPrototype structure flags.
-    // So for these cases, it's simpler to just call the getter directly.
-    if (stubInfo.thisValueIsInThisGPR())
-        return false;
 
     switch (getter->intrinsic()) {
     case TypedArrayByteOffsetIntrinsic:
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to