Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 0c96a8ad401581477c2714cf569ef3385a3ca08c
https://github.com/WebKit/WebKit/commit/0c96a8ad401581477c2714cf569ef3385a3ca08c
Author: Yusuke Suzuki <[email protected]>
Date: 2026-09-02 (Wed, 02 Sep 2026)
Changed paths:
M Source/JavaScriptCore/b3/B3LowerToAir.cpp
M Source/JavaScriptCore/b3/B3PatchpointSpecial.cpp
M Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
Log Message:
-----------
[JSC] Declare m_notCellMask and m_numberTag as ValueRep::lateReg in
cachedPutById
https://bugs.webkit.org/show_bug.cgi?id=323248
rdar://problem/186500258
Reviewed by Dan Hecht.
This is harmless, but this is wrong. Every other IC is declaring them as
lateReg. So let's do it. It is fine for this cachedPutById since its
result is Void, so it does not conflict with the return register, but
anyway, be consistent with the right approach. Also fixes LateRegister's
lowering while currently this path is not so much effectively used.
Also drive-by fix for ValueRep::ColdAny / ValueRep::LateColdAny in
Patchpoint's admitsStack. It should be listed as the same way to
B3LowerToAir. Currently this path was not used.
* Source/JavaScriptCore/b3/B3LowerToAir.cpp:
* Source/JavaScriptCore/b3/B3PatchpointSpecial.cpp:
(JSC::B3::PatchpointSpecial::admitsStack):
* Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp:
(JSC::FTL::DFG::LowerDFGToB3::cachedPutById):
Canonical link: https://commits.webkit.org/320378@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
