Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 4ff75b4e4fd0c9d9648f6e83e3e485e06764b50e
      
https://github.com/WebKit/WebKit/commit/4ff75b4e4fd0c9d9648f6e83e3e485e06764b50e
  Author: Yusuke Suzuki <[email protected]>
  Date:   2025-05-05 (Mon, 05 May 2025)

  Changed paths:
    M Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h
    M Source/JavaScriptCore/dfg/DFGMayExit.cpp

  Log Message:
  -----------
  [JSC] Make ValueToInt32 and MultiGetByVal static information solid
https://bugs.webkit.org/show_bug.cgi?id=292481
rdar://150574048

Reviewed by Yijia Huang.

1. ValueToInt32 just fails when the input value does not meet the edge
   types. So we do not need to say Exit in MayExit analysis.
2. Make MultiGetByVal result type solid when it is in-bounds.

* Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
* Source/JavaScriptCore/dfg/DFGMayExit.cpp:

Canonical link: https://commits.webkit.org/294520@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to