Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 9fcacd82ac42795b0edd38dcf02eacf8a5027b4f
https://github.com/WebKit/WebKit/commit/9fcacd82ac42795b0edd38dcf02eacf8a5027b4f
Author: Marcus Plutowski <[email protected]>
Date: 2026-08-05 (Wed, 05 Aug 2026)
Changed paths:
M Source/JavaScriptCore/assembler/JITOperationValidation.h
M Source/JavaScriptCore/assembler/MacroAssemblerARM64E.h
M Source/JavaScriptCore/llint/LLIntData.cpp
M Source/JavaScriptCore/llint/LLIntThunks.cpp
M Source/JavaScriptCore/llint/LLIntThunks.h
M Source/JavaScriptCore/runtime/JSCPtrTag.h
M Source/WTF/wtf/PlatformEnable.h
Log Message:
-----------
Implement JIT Cage Relaxation
https://bugs.webkit.org/show_bug.cgi?id=320667
rdar://183644612
Reviewed by Yusuke Suzuki.
As-is, the instrumentation afforded by the JIT Cage feature is disabled
by default on some platforms due to the overhead that comes with
the
full instrumentation. This patch adds the hooks for a new 'relaxed' mode
which will enable a cheaper alternative approach, hopefully making it
possible for us to enable this on more platforms in the future.
This patch does not enable any of the new functionality.
* Source/JavaScriptCore/assembler/MacroAssemblerARM64E.h:
* Source/JavaScriptCore/runtime/JSCPtrTag.h:
(JSC::tagJSCCodePtrImpl):
* Source/WTF/wtf/PlatformEnable.h:
* Source/JavaScriptCore/llint/LLIntData.cpp:
(JSC::LLInt::initialize):
* Source/JavaScriptCore/llint/LLIntThunks.cpp:
(JSC::LLInt::jitCageProbeThunk):
* Source/JavaScriptCore/llint/LLIntThunks.h:
* Source/JavaScriptCore/assembler/JITOperationValidation.h:
Canonical link:
https://flagged.apple.com:443/proxy?t2=DQ1U3G9AY7&o=aHR0cHM6Ly9jb21taXRzLndlYmtpdC5vcmcvMzE4Njc1QG1haW4=&emid=9ea2dd3e-4667-40ac-a43f-8ca50cd61c90&c=11
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
