Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 4b8ee8d96bd1911587fb97c01779b7116d960ea3
https://github.com/WebKit/WebKit/commit/4b8ee8d96bd1911587fb97c01779b7116d960ea3
Author: Yusuke Suzuki <[email protected]>
Date: 2026-06-12 (Fri, 12 Jun 2026)
Changed paths:
M Source/JavaScriptCore/dfg/DFGGraph.cpp
M Source/JavaScriptCore/dfg/DFGGraph.h
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
Log Message:
-----------
[JSC] Use runtime check for fast path for Spread
https://bugs.webkit.org/show_bug.cgi?id=316957
rdar://179423267
Reviewed by Yijia Huang.
Currently DFG / FTL Spread only take fast path when AbstractValue is
proven Array with specific shape. But this is a bit too conservative,
let's have runtime check with original Array structures so that we can
still take the fast path even when it is not proven.
* Source/JavaScriptCore/dfg/DFGGraph.cpp:
(JSC::DFG::Graph::canDoFastSpreadWithStructureCheck):
* Source/JavaScriptCore/dfg/DFGGraph.h:
* Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:
* Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::compileSpread):
Canonical link: https://commits.webkit.org/315126@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
