Title: [171981] branches/safari-600.1.4-branch/Source/_javascript_Core

Diff

Modified: branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog (171980 => 171981)


--- branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog	2014-08-03 07:56:07 UTC (rev 171980)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog	2014-08-03 08:03:32 UTC (rev 171981)
@@ -1,5 +1,23 @@
 2014-08-03  Babak Shafiei  <[email protected]>
 
+        Merge patch for <rdar://problem/17887398>.
+ 
+    2014-07-30  Filip Pizlo  <[email protected]>
+
+            NewFunctionExpression and NewFunctionNoCheck should setHaveStructures(true)
+            https://bugs.webkit.org/show_bug.cgi?id=135430
+
+            Reviewed by Mark Hahnenberg.
+
+            * dfg/DFGAbstractInterpreterInlines.h:
+            (JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
+            * tests/stress/new-function-_expression_-has-structures.js: Added.
+            (foo.f):
+            (foo.f.prototype.f):
+            (foo):  
+
+2014-08-03  Babak Shafiei  <[email protected]>
+
         Merge r171949.
 
     2014-08-01  Csaba Osztrogonác  <[email protected]>

Modified: branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h (171980 => 171981)


--- branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h	2014-08-03 07:56:07 UTC (rev 171980)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h	2014-08-03 08:03:32 UTC (rev 171981)
@@ -1430,6 +1430,7 @@
     case NewFunctionNoCheck:
         forNode(node).set(
             m_graph, m_codeBlock->globalObjectFor(node->origin.semantic)->functionStructure());
+        m_state.setHaveStructures(true);
         break;
         
     case GetCallee:

Added: branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js (0 => 171981)


--- branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js	                        (rev 0)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js	2014-08-03 08:03:32 UTC (rev 171981)
@@ -0,0 +1,11 @@
+function foo() {
+    var f = function() { return 42 };
+    f.prototype.f = function() { return 43; };
+    return f.prototype.f;
+}
+
+noInline(foo);
+
+for (var i = 0; i < 10000; ++i)
+    foo();
+
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to