Title: [153270] trunk/Source/_javascript_Core
- Revision
- 153270
- Author
- [email protected]
- Date
- 2013-07-24 21:04:33 -0700 (Wed, 24 Jul 2013)
Log Message
fourthTier: CheckArray should call the right version of filterArrayModes
https://bugs.webkit.org/show_bug.cgi?id=118488
Reviewed by Filip Pizlo.
Currently in the CFA CheckArray doesn't call the right filterArrayMode which can cause
the CFA to ignore when it sees a contradiction.
* dfg/DFGAbstractState.cpp:
(JSC::DFG::AbstractState::executeEffects):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (153269 => 153270)
--- trunk/Source/_javascript_Core/ChangeLog 2013-07-25 04:04:32 UTC (rev 153269)
+++ trunk/Source/_javascript_Core/ChangeLog 2013-07-25 04:04:33 UTC (rev 153270)
@@ -1,3 +1,16 @@
+2013-07-08 Mark Hahnenberg <[email protected]>
+
+ CheckArray should call the right version of filterArrayModes
+ https://bugs.webkit.org/show_bug.cgi?id=118488
+
+ Reviewed by Filip Pizlo.
+
+ Currently in the CFA CheckArray doesn't call the right filterArrayMode which can cause
+ the CFA to ignore when it sees a contradiction.
+
+ * dfg/DFGAbstractState.cpp:
+ (JSC::DFG::AbstractState::executeEffects):
+
2013-07-07 Filip Pizlo <[email protected]>
fourthTier: Graph::clearAndDerefChild() makes no sense anymore, and neither does Nop
Modified: trunk/Source/_javascript_Core/dfg/DFGAbstractState.cpp (153269 => 153270)
--- trunk/Source/_javascript_Core/dfg/DFGAbstractState.cpp 2013-07-25 04:04:32 UTC (rev 153269)
+++ trunk/Source/_javascript_Core/dfg/DFGAbstractState.cpp 2013-07-25 04:04:33 UTC (rev 153270)
@@ -1498,7 +1498,7 @@
RELEASE_ASSERT_NOT_REACHED();
break;
}
- forNode(node->child1()).filterArrayModes(node->arrayMode().arrayModesThatPassFiltering());
+ filterArrayModes(node->child1(), node->arrayMode().arrayModesThatPassFiltering());
m_haveStructures = true;
break;
}
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
