Title: [171981] branches/safari-600.1.4-branch/Source/_javascript_Core
- Revision
- 171981
- Author
- [email protected]
- Date
- 2014-08-03 01:03:32 -0700 (Sun, 03 Aug 2014)
Log Message
Merged patch for <rdar://problem/17887398>.
Modified Paths
Added Paths
Diff
Modified: branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog (171980 => 171981)
--- branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog 2014-08-03 07:56:07 UTC (rev 171980)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/ChangeLog 2014-08-03 08:03:32 UTC (rev 171981)
@@ -1,5 +1,23 @@
2014-08-03 Babak Shafiei <[email protected]>
+ Merge patch for <rdar://problem/17887398>.
+
+ 2014-07-30 Filip Pizlo <[email protected]>
+
+ NewFunctionExpression and NewFunctionNoCheck should setHaveStructures(true)
+ https://bugs.webkit.org/show_bug.cgi?id=135430
+
+ Reviewed by Mark Hahnenberg.
+
+ * dfg/DFGAbstractInterpreterInlines.h:
+ (JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
+ * tests/stress/new-function-_expression_-has-structures.js: Added.
+ (foo.f):
+ (foo.f.prototype.f):
+ (foo):
+
+2014-08-03 Babak Shafiei <[email protected]>
+
Merge r171949.
2014-08-01 Csaba Osztrogonác <[email protected]>
Modified: branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h (171980 => 171981)
--- branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2014-08-03 07:56:07 UTC (rev 171980)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/dfg/DFGAbstractInterpreterInlines.h 2014-08-03 08:03:32 UTC (rev 171981)
@@ -1430,6 +1430,7 @@
case NewFunctionNoCheck:
forNode(node).set(
m_graph, m_codeBlock->globalObjectFor(node->origin.semantic)->functionStructure());
+ m_state.setHaveStructures(true);
break;
case GetCallee:
Added: branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js (0 => 171981)
--- branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js (rev 0)
+++ branches/safari-600.1.4-branch/Source/_javascript_Core/tests/stress/new-function-_expression_-has-structures.js 2014-08-03 08:03:32 UTC (rev 171981)
@@ -0,0 +1,11 @@
+function foo() {
+ var f = function() { return 42 };
+ f.prototype.f = function() { return 43; };
+ return f.prototype.f;
+}
+
+noInline(foo);
+
+for (var i = 0; i < 10000; ++i)
+ foo();
+
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes