Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 16d97628d37cf47551e3fed363077536b5d37d5a
https://github.com/WebKit/WebKit/commit/16d97628d37cf47551e3fed363077536b5d37d5a
Author: Yijia Huang <[email protected]>
Date: 2024-11-07 (Thu, 07 Nov 2024)
Changed paths:
A
JSTests/stress/clobber-new-index-reg-in-enumerator-next-update-index-and-mode.js
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h
Log Message:
-----------
[JSC] Should preserve the index in compileHasIndexedProperty if needed
https://bugs.webkit.org/show_bug.cgi?id=278427
rdar://129328633
Reviewed by Keith Miller.
The EnumeratorNextUpdateIndexAndMode node is expected to return two results.
In the fast path for case IndexedMode, the index value should be returned as
one of the results. However, the slow path of compileHasIndexedProperty
triggers a operation call with a single result. So, compileHasIndexedProperty
should preserve the index in compileHasIndexedProperty if needed.
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h:
Originally-landed-as: 280938.256@safari-7619-branch (2936053b96d6).
rdar://138930137
Canonical link: https://commits.webkit.org/286293@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
