Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 6a359a00ccf8475c9eb9efc9bcae0dfa9daaad65
      
https://github.com/WebKit/WebKit/commit/6a359a00ccf8475c9eb9efc9bcae0dfa9daaad65
  Author: Sergey Rubanov <[email protected]>
  Date:   2026-09-03 (Thu, 03 Sep 2026)

  Changed paths:
    A JSTests/wasm/stress/table-get-funcref.js
    M Source/JavaScriptCore/b3/B3AbstractHeapRepository.h
    M Source/JavaScriptCore/wasm/WasmBBQJIT64.cpp
    M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp
    M Source/JavaScriptCore/wasm/WasmTable.h

  Log Message:
  -----------
  [JSC][Wasm] Inline table.get for funcref
https://bugs.webkit.org/show_bug.cgi?id=322528

Reviewed by Yusuke Suzuki.

BBQ and OMG bounds-check against Table length and load the cached
wrapper. A miss still calls operationGetWasmTableElement to
materialize a lazy wrapper or return null.

* Source/JavaScriptCore/b3/B3AbstractHeapRepository.h:
* Source/JavaScriptCore/wasm/WasmBBQJIT64.cpp:
* Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp:
* Source/JavaScriptCore/wasm/WasmTable.h:
* JSTests/wasm/stress/table-get-funcref.js: Added.

Canonical link: https://commits.webkit.org/320438@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to