Title: [154261] trunk/Source/_javascript_Core
- Revision
- 154261
- Author
- [email protected]
- Date
- 2013-08-18 21:46:41 -0700 (Sun, 18 Aug 2013)
Log Message
REGRESSION(r154218): DFG::FixupPhase no longer turns GetById's child1 into CellUse
https://bugs.webkit.org/show_bug.cgi?id=119961
Reviewed by Mark Hahnenberg.
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
Modified Paths
Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (154260 => 154261)
--- trunk/Source/_javascript_Core/ChangeLog 2013-08-19 04:18:31 UTC (rev 154260)
+++ trunk/Source/_javascript_Core/ChangeLog 2013-08-19 04:46:41 UTC (rev 154261)
@@ -1,3 +1,13 @@
+2013-08-17 Filip Pizlo <[email protected]>
+
+ REGRESSION(r154218): DFG::FixupPhase no longer turns GetById's child1 into CellUse
+ https://bugs.webkit.org/show_bug.cgi?id=119961
+
+ Reviewed by Mark Hahnenberg.
+
+ * dfg/DFGFixupPhase.cpp:
+ (JSC::DFG::FixupPhase::fixupNode):
+
2013-08-18 Gavin Barraclough <[email protected]>
https://bugs.webkit.org/show_bug.cgi?id=119972
Modified: trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp (154260 => 154261)
--- trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2013-08-19 04:18:31 UTC (rev 154260)
+++ trunk/Source/_javascript_Core/dfg/DFGFixupPhase.cpp 2013-08-19 04:46:41 UTC (rev 154261)
@@ -737,6 +737,7 @@
attemptToMakeGetByteLength(node);
break;
}
+ setUseKindAndUnboxIfProfitable<CellUse>(node->child1());
break;
}
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
