Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: d9d88254ab5e7727f7c48d9bb274da5f8381a887
https://github.com/WebKit/WebKit/commit/d9d88254ab5e7727f7c48d9bb274da5f8381a887
Author: Keith Miller <[email protected]>
Date: 2025-09-23 (Tue, 23 Sep 2025)
Changed paths:
A JSTests/stress/array-constant-size-allocation-large.js
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
Log Message:
-----------
FTL's NewButterflyWithSize passes the wrong size to the slow path
https://bugs.webkit.org/show_bug.cgi?id=299308
rdar://160976464
Reviewed by Yijia Huang.
My original patch 300129@main passed the indexed payload size rather than
allocation size, which the
slow path expected. This meant the butterfly was allocated 8 bytes too small.
This patch fixes the
lowering code to pass the correct value.
Canonical link: https://commits.webkit.org/300386@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
