[webkit-changes] [WebKit/WebKit] 9d3aa2: [JSC] holesMustForwardToPrototype should be fast f...

[Yusuke Suzuki]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 9d3aa204e699641f8bd91f7fc3ed32e4de6a912b
      https://github.com/WebKit/WebKit/commit/9d3aa204e699641f8bd91f7fc3ed32e4de6a912b
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2023-07-20 (Thu, 20 Jul 2023)

  Changed paths:
    M Source/JavaScriptCore/runtime/Structure.cpp
    M Source/JavaScriptCore/runtime/Structure.h
    M Source/JavaScriptCore/runtime/StructureInlines.h

  Log Message:
  -----------
  [JSC] holesMustForwardToPrototype should be fast for normal arrays
https://bugs.webkit.org/show_bug.cgi?id=259239
rdar://112308103

Reviewed by Alexey Shvayka.

We should quickly say `false` from Structure::holesMustForwardToPrototype if the target structure
is original array and we are having array prototype sane chain (this means we have no indexed properties,
and array prototype chain is solid).

* Source/JavaScriptCore/runtime/Structure.cpp:
(JSC::Structure::holesMustForwardToPrototypeSlow const):
(JSC::Structure::holesMustForwardToPrototype const): Deleted.
* Source/JavaScriptCore/runtime/Structure.h:
* Source/JavaScriptCore/runtime/StructureInlines.h:
(JSC::Structure::holesMustForwardToPrototype const):

Canonical link: https://commits.webkit.org/266183@main