[webkit-changes] [WebKit/WebKit] c181ce: [JSC] Disallow freezing only when allowing GC

[Yusuke Suzuki]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c181ce563e56cf0617a4a6c6005e32fd80916d7f
      https://github.com/WebKit/WebKit/commit/c181ce563e56cf0617a4a6c6005e32fd80916d7f
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2023-11-07 (Tue, 07 Nov 2023)

  Changed paths:
    M Source/JavaScriptCore/ftl/FTLCompile.cpp

  Log Message:
  -----------
  [JSC] Disallow freezing only when allowing GC
https://bugs.webkit.org/show_bug.cgi?id=264353
rdar://118069302

Reviewed by Justin Michaud.

It turned out that DFG clobberize does freeze, and it is used for DFG dump.
But we do not run it while running B3 of course, so this patch disallows freezing only when we are allowing GC for B3.

* Source/JavaScriptCore/ftl/FTLCompile.cpp:
(JSC::FTL::compile):

Canonical link: https://commits.webkit.org/270341@main