Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ce60d5d618367a814de46344cb0e45696bf27786
https://github.com/WebKit/WebKit/commit/ce60d5d618367a814de46344cb0e45696bf27786
Author: Yusuke Suzuki <[email protected]>
Date: 2026-08-20 (Thu, 20 Aug 2026)
Changed paths:
M Source/JavaScriptCore/wasm/WasmBBQJIT64.cpp
Log Message:
-----------
[JSC] Emit mutatorFence in BBQ JIT for WasmGC
https://bugs.webkit.org/show_bug.cgi?id=322246
rdar://185480157
Reviewed by Sosuke Suzuki.
Even if the stored values are constant, we should still emit
mutatorFence since it can be visited by the concurrent collector.
This patch fixes it in BBQ JIT. Fence is correctly emitted in the other
tiers.
* Source/JavaScriptCore/wasm/WasmBBQJIT64.cpp:
(JSC::Wasm::BBQJITImpl::BBQJIT::addStructNewDefault):
(JSC::Wasm::BBQJITImpl::BBQJIT::addStructNew):
Canonical link: https://commits.webkit.org/319581@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
