Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ce3942e437cb4934423bc91e48895209a92838d7
https://github.com/WebKit/WebKit/commit/ce3942e437cb4934423bc91e48895209a92838d7
Author: Yusuke Suzuki <[email protected]>
Date: 2026-05-15 (Fri, 15 May 2026)
Changed paths:
A JSTests/stress/megamorphic-ic-symbol.js
M Source/JavaScriptCore/bytecode/InlineCacheCompiler.cpp
M Source/JavaScriptCore/dfg/DFGFixupPhase.cpp
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
M Source/JavaScriptCore/jit/AssemblyHelpers.cpp
M Source/JavaScriptCore/jit/AssemblyHelpers.h
M Source/JavaScriptCore/jit/JITOperations.cpp
Log Message:
-----------
[JSC] Extend megamorphic ByVal IC with symbols
https://bugs.webkit.org/show_bug.cgi?id=314890
rdar://177155642
Reviewed by Dan Hecht.
This patch extends indexed-megamorphic IC to accept symbols.
1. IndexedMegamorphic ICs will accept symbol values. We check types and
extract SymbolImpl* from Symbol. The rest of the code is the same.
2. DFG / FTL starts putting StringUse / SymbolUse / UntypedUse for
subscript of Megamorphic nodes. And based on these speculations,
we change the behavior of how to extract uid from the value.
3. operations should also accept symbols.
Test: JSTests/stress/megamorphic-ic-symbol.js
Canonical link: https://commits.webkit.org/313342@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
