Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 7051d3ac1f34c7f2899f8a5be987a68a0f03da86
https://github.com/WebKit/WebKit/commit/7051d3ac1f34c7f2899f8a5be987a68a0f03da86
Author: Keith Miller <[email protected]>
Date: 2026-01-14 (Wed, 14 Jan 2026)
Changed paths:
M Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp
M Source/JavaScriptCore/dfg/DFGConstantFoldingPhase.cpp
M Source/JavaScriptCore/dfg/DFGEdge.h
M Source/JavaScriptCore/dfg/DFGFixupPhase.cpp
M Source/JavaScriptCore/dfg/DFGNode.cpp
M Source/JavaScriptCore/dfg/DFGNode.h
M Source/JavaScriptCore/dfg/DFGObjectAllocationSinkingPhase.cpp
M Source/JavaScriptCore/dfg/DFGPutStackSinkingPhase.cpp
M Source/JavaScriptCore/dfg/DFGSSAConversionPhase.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h
Log Message:
-----------
[JSC] Apply KnownStorageUse to all storage operands in DFG/FTL
https://bugs.webkit.org/show_bug.cgi?id=305395
rdar://168068069
Reviewed by Justin Michaud.
In 305546@main we added support for KnownStorageUse but only applied it
to Upsilons produced by Object Allocation Sinking for Arrays. This patch
fills out the rest of the storage operands in the DFG/FTL. This
shouldn't have any behavioral changes but should make it easier to
validate the lifetime of a butterfly pointer.
Canonical link: https://commits.webkit.org/305615@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
