Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 2e2c23521a24a39d687eefd77fab36d962078af2
https://github.com/WebKit/WebKit/commit/2e2c23521a24a39d687eefd77fab36d962078af2
Author: Sosuke Suzuki <[email protected]>
Date: 2026-01-28 (Wed, 28 Jan 2026)
Changed paths:
A JSTests/microbenchmarks/map-size.js
A JSTests/microbenchmarks/set-size.js
A JSTests/stress/map-size-dfg.js
A JSTests/stress/set-size-cse.js
A JSTests/stress/set-size-dfg.js
A JSTests/stress/set-size-type-check.js
M Source/JavaScriptCore/bytecode/InlineCacheCompiler.cpp
M Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h
M Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp
M Source/JavaScriptCore/dfg/DFGClobberize.h
M Source/JavaScriptCore/dfg/DFGDoesGC.cpp
M Source/JavaScriptCore/dfg/DFGFixupPhase.cpp
M Source/JavaScriptCore/dfg/DFGHeapLocation.h
M Source/JavaScriptCore/dfg/DFGNodeType.h
M Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp
M Source/JavaScriptCore/dfg/DFGSafeToExecute.h
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp
M Source/JavaScriptCore/ftl/FTLCapabilities.cpp
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
M Source/JavaScriptCore/runtime/Intrinsic.h
M Source/JavaScriptCore/runtime/MapPrototype.cpp
M Source/JavaScriptCore/runtime/OrderedHashTableHelper.h
M Source/JavaScriptCore/runtime/SetPrototype.cpp
Log Message:
-----------
[JSC] Optimize `Set#size` and `Map#size` in DFG/FTL and IC
https://bugs.webkit.org/show_bug.cgi?id=306080
Reviewed by Yusuke Suzuki.
This patch changes to optimize `Set#size` and `Map#size` getter
in DFG/FTL and IC.
TipOfTree Patched
set-size 7.6794+-0.1954 ^ 3.4315+-1.1951 ^
definitely 2.2379x faster
map-size 9.8016+-1.8670 ^ 3.5752+-0.9468 ^
definitely 2.7416x faster
Tests: JSTests/microbenchmarks/map-size.js
JSTests/microbenchmarks/set-size.js
JSTests/stress/map-size-dfg.js
JSTests/stress/set-size-cse.js
JSTests/stress/set-size-dfg.js
JSTests/stress/set-size-type-check.js
* JSTests/microbenchmarks/map-size.js: Added.
(mapSize):
* JSTests/microbenchmarks/set-size.js: Added.
(setSize):
* JSTests/stress/map-size-dfg.js: Added.
(shouldBe):
(mapSize):
* JSTests/stress/set-size-cse.js: Added.
(shouldBe):
(testSizeCSE):
* JSTests/stress/set-size-dfg.js: Added.
(shouldBe):
(setSize):
* JSTests/stress/set-size-type-check.js: Added.
(shouldThrow):
(getSize):
* Source/JavaScriptCore/bytecode/InlineCacheCompiler.cpp:
(JSC::InlineCacheCompiler::canEmitIntrinsicGetter):
(JSC::InlineCacheCompiler::emitIntrinsicGetter):
* Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
* Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::handleIntrinsicGetter):
* Source/JavaScriptCore/dfg/DFGClobberize.h:
(JSC::DFG::clobberize):
* Source/JavaScriptCore/dfg/DFGDoesGC.cpp:
(JSC::DFG::doesGC):
* Source/JavaScriptCore/dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
* Source/JavaScriptCore/dfg/DFGHeapLocation.h:
* Source/JavaScriptCore/dfg/DFGNodeType.h:
* Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp:
* Source/JavaScriptCore/dfg/DFGSafeToExecute.h:
(JSC::DFG::safeToExecute):
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h:
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::compile):
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp:
(JSC::DFG::SpeculativeJIT::compile):
* Source/JavaScriptCore/ftl/FTLCapabilities.cpp:
(JSC::FTL::canCompile):
* Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::compileNode):
(JSC::FTL::DFG::LowerDFGToB3::compileCompareStrictEq):
* Source/JavaScriptCore/runtime/Intrinsic.h:
* Source/JavaScriptCore/runtime/MapPrototype.cpp:
(JSC::MapPrototype::finishCreation):
* Source/JavaScriptCore/runtime/OrderedHashTableHelper.h:
(JSC::OrderedHashTableHelper::offsetInStorageForIndex):
(JSC::OrderedHashTableHelper::offsetOfAliveEntryCount):
* Source/JavaScriptCore/runtime/SetPrototype.cpp:
(JSC::SetPrototype::finishCreation):
Canonical link: https://commits.webkit.org/306337@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
