Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 81aa535db3c9c340cbbeef9aa8880d95715b39b7
https://github.com/WebKit/WebKit/commit/81aa535db3c9c340cbbeef9aa8880d95715b39b7
Author: Anand Srinivasan <[email protected]>
Date: 2026-05-26 (Tue, 26 May 2026)
Changed paths:
A JSTests/stress/b3cppi-ssa-dominance.js
M Source/JavaScriptCore/b3/B3CanonicalizePrePostIncrements.cpp
Log Message:
-----------
Fix dominance analysis in B3CanonicalizePrePostIncrements
https://bugs.webkit.org/show_bug.cgi?id=310055
rdar://172282220
Reviewed by Yusuke Suzuki and Yijia Huang.
B3CanonicalizePrePostIncrements moves an add to generate an address for
a memory operation, and needs to check that the current block dominates
all uses of the add's result. If the current block does not dominate all
uses the compiler must cancel the optimization for the current block but
right now the loop does nothing.
Test: JSTests/stress/b3cppi-ssa-dominance.js
* JSTests/stress/b3cppi-ssa-dominance.js: Added.
(arr2.fill.0x1337.trigger):
* Source/JavaScriptCore/b3/B3CanonicalizePrePostIncrements.cpp:
(JSC::B3::canonicalizePrePostIncrements):
Originally-landed-as: 305413.504@rapid/safari-7624.2.5.110-branch
(783f58da6e75). rdar://176062203
Canonical link: https://commits.webkit.org/313913@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
