[webkit-changes] [WebKit/WebKit] 3cb7aa: [JSC] Use DFG::Call when calling typed array const...

[Commit Queue]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 3cb7aade1a113efd062754a20578b12b1efe3dc5
      https://github.com/WebKit/WebKit/commit/3cb7aade1a113efd062754a20578b12b1efe3dc5
  Author: Yijia Huang <yijia_huang at apple.com>
  Date:   2023-07-26 (Wed, 26 Jul 2023)

  Changed paths:
    A JSTests/stress/construct-typed-array-without-new-in-dfg-and-ftl.js
    M Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp

  Log Message:
  -----------
  [JSC] Use DFG::Call when calling typed array constructor without keyword new
https://bugs.webkit.org/show_bug.cgi?id=259523
rdar://111952807

Reviewed by Keith Miller.

We should emit DFG::Call for calling typed array constructor without
keyword new in DFG. Then, we can use call slow path to trigger
callConstructor for throwing exception.

* JSTests/stress/construct-typed-array-without-new-in-dfg-and-ftl.js: Added.
(test.opt):
(test):
* Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::handleTypedArrayConstructor):
(JSC::DFG::ByteCodeParser::handleConstantFunction):

Canonical link: https://commits.webkit.org/266331@main