[webkit-changes] [WebKit/WebKit] d77140: Backport fix for erroneous CSE of EnumeratorNextUp...

[Commit Queue]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: d771407d4bb4b8bb3a06455425e2cdf3011ec85b
      https://github.com/WebKit/WebKit/commit/d771407d4bb4b8bb3a06455425e2cdf3011ec85b
  Author: David Degazio <d_degazio at apple.com>
  Date:   2023-07-28 (Fri, 28 Jul 2023)

  Changed paths:
    M Source/JavaScriptCore/dfg/DFGHeapLocation.cpp

  Log Message:
  -----------
  Backport fix for erroneous CSE of EnumeratorNextUpdateIndexAndMode and HasIndexedProperty
rdar://110785576

Reviewed by Michael Saboff, Justin Michaud and Yusuke Suzuki.

Backports part of https://commits.webkit.org/263909@main, which
prevents erroneous elimination of an EnumeratorNextUpdateIndexAndMode
and HasIndexedProperty node pair if they have the same operands.
The full commit in 263909 at main depends on the existence of DFG tuples,
which haven't yet been brought into the security branch, so those
parts are omitted from this patch.

* Source/JavaScriptCore/dfg/DFGClobberize.h:
(JSC::DFG::clobberize):
* Source/JavaScriptCore/dfg/DFGHeapLocation.cpp:
(WTF::printInternal):
* Source/JavaScriptCore/dfg/DFGHeapLocation.h:

Originally-landed-as: 259548.828 at safari-7615-branch (01e86f13952b). rdar://110785576
Canonical link: https://commits.webkit.org/266389@main