Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ca74e529b927042f3bbdbc9aef0050bd8061e6f9
https://github.com/WebKit/WebKit/commit/ca74e529b927042f3bbdbc9aef0050bd8061e6f9
Author: Vassili Bykov <[email protected]>
Date: 2026-07-21 (Tue, 21 Jul 2026)
Changed paths:
M Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp
M Source/JavaScriptCore/jit/JITCall.cpp
M Source/JavaScriptCore/jit/JITInlineCacheGenerator.cpp
M Source/JavaScriptCore/jit/JITInlineCacheGenerator.h
M Source/JavaScriptCore/jit/JITPropertyAccess.cpp
Log Message:
-----------
[JSC] Generate Data IC code as fall-through
https://bugs.webkit.org/show_bug.cgi?id=318125
rdar://180950753
Reviewed by Keith Miller.
Inline cache code is usually generated so the guard falls through into the fast
case and
the fast case falls through into the continuation code. This keeps the common
path lined
up in the icache, and the slow case is separate to not dilute it.
Data ICs currently don't follow this layout, and the fast and the slow branches
are
interleaved. This patch changes the layout so that the fast path is a
fall-through.
Covered by existing tests.
Canonical link: https://commits.webkit.org/317655@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
