<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[198279] releases/WebKitGTK/webkit-2.12</title>
</head>
<body>
<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; }
#msg dl a { font-weight: bold}
#msg dl a:link { color:#fc3; }
#msg dl a:active { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd><a href="http://trac.webkit.org/projects/webkit/changeset/198279">198279</a></dd>
<dt>Author</dt> <dd>carlosgc@webkit.org</dd>
<dt>Date</dt> <dd>2016-03-16 08:16:37 -0700 (Wed, 16 Mar 2016)</dd>
</dl>
<h3>Log Message</h3>
<pre>Revert "Merge <a href="http://trac.webkit.org/projects/webkit/changeset/197549">r197549</a> - DFG/FTL should inline accesses to RegExpObject::m_lastIndex"
This reverts commit 75a052408f9d2d6401972afb8a422f0e5979aeff.</pre>
<h3>Modified Paths</h3>
<ul>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsChangeLog">releases/WebKitGTK/webkit-2.12/LayoutTests/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreChangeLog">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGAbstractHeaph">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractHeap.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGAbstractInterpreterInlinesh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGClobberizeh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGClobberize.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGDoesGCcpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGDoesGC.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGFixupPhasecpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGFixupPhase.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGHeapLocationcpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGHeapLocationh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGNodeTypeh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGNodeType.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGPredictionPropagationPhasecpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSafeToExecuteh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSafeToExecute.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJITcpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJITh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJIT32_64cpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJIT64cpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGStoreBarrierInsertionPhasecpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGStoreBarrierInsertionPhase.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLAbstractHeapRepositorycpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLAbstractHeapRepositoryh">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.h</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLCapabilitiescpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLCapabilities.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLLowerDFGToB3cpp">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit212SourceJavaScriptCoreruntimeRegExpObjecth">releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/runtime/RegExpObject.h</a></li>
</ul>
<h3>Removed Paths</h3>
<ul>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressregexplastindexexpectedtxt">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index-expected.txt</a></li>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressregexplastindexhtml">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index.html</a></li>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressregexpsetlastindexexpectedtxt">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index-expected.txt</a></li>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressregexpsetlastindexhtml">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index.html</a></li>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressscripttestsregexplastindexjs">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-last-index.js</a></li>
<li><a href="#releasesWebKitGTKwebkit212LayoutTestsjsregressscripttestsregexpsetlastindexjs">releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-set-last-index.js</a></li>
</ul>
</div>
<div id="patch">
<h3>Diff</h3>
<a id="releasesWebKitGTKwebkit212LayoutTestsChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/LayoutTests/ChangeLog (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/ChangeLog 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/ChangeLog 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -129,20 +129,6 @@
</span><span class="cx">
</span><span class="cx"> 2016-03-03 Filip Pizlo <fpizlo@apple.com>
</span><span class="cx">
</span><del>- DFG/FTL should inline accesses to RegExpObject::m_lastIndex
- https://bugs.webkit.org/show_bug.cgi?id=155003
-
- Reviewed by Benjamin Poulain.
-
- * js/regress/regexp-last-index-expected.txt: Added.
- * js/regress/regexp-last-index.html: Added.
- * js/regress/regexp-set-last-index-expected.txt: Added.
- * js/regress/regexp-set-last-index.html: Added.
- * js/regress/script-tests/regexp-last-index.js: Added.
- * js/regress/script-tests/regexp-set-last-index.js: Added.
-
-2016-03-03 Filip Pizlo <fpizlo@apple.com>
-
</del><span class="cx"> Unreviewed, remove test with flaky timeout that doesn't test anything anymore. This test
</span><span class="cx"> was relevant back when arguments got torn off; something that we don't do anymore. It
</span><span class="cx"> uses a loop that waits for the top-tier compiler to compile it. We don't write tests
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressregexplastindexexpectedtxt"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index-expected.txt (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index-expected.txt 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index-expected.txt 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,10 +0,0 @@
</span><del>-JSRegress/regexp-last-index
-
-On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
-
-
-PASS no exception thrown
-PASS successfullyParsed is true
-
-TEST COMPLETE
-
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressregexplastindexhtml"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index.html (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index.html 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-last-index.html 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,12 +0,0 @@
</span><del>-<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
-<html>
-<head>
-<script src="../../resources/js-test-pre.js"></script>
-</head>
-<body>
-<script src="../../resources/regress-pre.js"></script>
-<script src="script-tests/regexp-last-index.js"></script>
-<script src="../../resources/regress-post.js"></script>
-<script src="../../resources/js-test-post.js"></script>
-</body>
-</html>
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressregexpsetlastindexexpectedtxt"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index-expected.txt (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index-expected.txt 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index-expected.txt 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,10 +0,0 @@
</span><del>-JSRegress/regexp-set-last-index
-
-On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
-
-
-PASS no exception thrown
-PASS successfullyParsed is true
-
-TEST COMPLETE
-
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressregexpsetlastindexhtml"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index.html (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index.html 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/regexp-set-last-index.html 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,12 +0,0 @@
</span><del>-<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
-<html>
-<head>
-<script src="../../resources/js-test-pre.js"></script>
-</head>
-<body>
-<script src="../../resources/regress-pre.js"></script>
-<script src="script-tests/regexp-set-last-index.js"></script>
-<script src="../../resources/regress-post.js"></script>
-<script src="../../resources/js-test-post.js"></script>
-</body>
-</html>
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressscripttestsregexplastindexjs"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-last-index.js (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-last-index.js 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-last-index.js 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,10 +0,0 @@
</span><del>-(function() {
- var re = /foo/g;
- re.exec("bar foo bar");
- var result = 0;
- var n = 10000000;
- for (var i = 0; i < n; ++i)
- result += re.lastIndex;
- if (result != 7 * n)
- throw "Error: bad result: " + result;
-})();
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212LayoutTestsjsregressscripttestsregexpsetlastindexjs"></a>
<div class="delfile"><h4>Deleted: releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-set-last-index.js (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-set-last-index.js 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/LayoutTests/js/regress/script-tests/regexp-set-last-index.js 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,9 +0,0 @@
</span><del>-(function() {
- var re = /foo/g;
- var n = 10000000;
- for (var i = 0; i < n; ++i)
- re.lastIndex = 5;
- re.exec("foo bar foo");
- if (re.lastIndex != "foo bar foo".length)
- throw "Error: bad value of lastIndx: " + re.lastIndex;
-})();
</del></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ChangeLog (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ChangeLog 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ChangeLog 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -545,65 +545,6 @@
</span><span class="cx"> * runtime/Lookup.h:
</span><span class="cx"> (JSC::putEntry):
</span><span class="cx">
</span><del>-2016-03-03 Filip Pizlo <fpizlo@apple.com>
-
- DFG/FTL should inline accesses to RegExpObject::m_lastIndex
- https://bugs.webkit.org/show_bug.cgi?id=155003
-
- Reviewed by Benjamin Poulain.
-
- The Octane/regexp benchmark sets RegExps' lastIndex a lot. I could imagine this being
- something that people want to do. Right now, I'm not convinced that making the RegExp object
- be more plain-JS would be a good idea considering that pretty much all uses of it will
- require some special compiler magic. Also, it's good that this patch teaches the compiler
- how to reason about lastIndex since some of my other plans for regexp involve having the
- compiler treat more regexp stuff as intrinsic.
-
- This is a smaller Octane/regexp speed-up than I hoped - maybe around 1%. It's an enormous
- speed-up on the microbenchmarks attached to this patch.
-
- * dfg/DFGAbstractHeap.h:
- * dfg/DFGAbstractInterpreterInlines.h:
- (JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):
- * dfg/DFGClobberize.h:
- (JSC::DFG::clobberize):
- * dfg/DFGDoesGC.cpp:
- (JSC::DFG::doesGC):
- * dfg/DFGFixupPhase.cpp:
- (JSC::DFG::FixupPhase::fixupNode):
- * dfg/DFGHeapLocation.h:
- * dfg/DFGNodeType.h:
- * dfg/DFGPredictionPropagationPhase.cpp:
- (JSC::DFG::PredictionPropagationPhase::propagate):
- * dfg/DFGSafeToExecute.h:
- (JSC::DFG::safeToExecute):
- * dfg/DFGSpeculativeJIT.cpp:
- (JSC::DFG::SpeculativeJIT::compilePutAccessorByVal):
- (JSC::DFG::SpeculativeJIT::compileGetRegExpObjectLastIndex):
- (JSC::DFG::SpeculativeJIT::compileSetRegExpObjectLastIndex):
- * dfg/DFGSpeculativeJIT.h:
- * dfg/DFGSpeculativeJIT32_64.cpp:
- (JSC::DFG::SpeculativeJIT::compile):
- * dfg/DFGSpeculativeJIT64.cpp:
- (JSC::DFG::SpeculativeJIT::compile):
- * dfg/DFGStoreBarrierInsertionPhase.cpp:
- * ftl/FTLAbstractHeapRepository.cpp:
- * ftl/FTLAbstractHeapRepository.h:
- * ftl/FTLCapabilities.cpp:
- (JSC::FTL::canCompile):
- * ftl/FTLLowerDFGToB3.cpp:
- (JSC::FTL::DFG::LowerDFGToB3::compileNode):
- (JSC::FTL::DFG::LowerDFGToB3::compileStringReplace):
- (JSC::FTL::DFG::LowerDFGToB3::compileGetRegExpObjectLastIndex):
- (JSC::FTL::DFG::LowerDFGToB3::compileSetRegExpObjectLastIndex):
- (JSC::FTL::DFG::LowerDFGToB3::didOverflowStack):
- (JSC::FTL::DFG::LowerDFGToB3::lowObject):
- (JSC::FTL::DFG::LowerDFGToB3::lowRegExpObject):
- (JSC::FTL::DFG::LowerDFGToB3::lowString):
- * runtime/RegExpObject.h:
- (JSC::RegExpObject::createStructure):
- (JSC::RegExpObject::offsetOfLastIndex):
-
</del><span class="cx"> 2016-03-03 Benjamin Poulain <bpoulain@apple.com>
</span><span class="cx">
</span><span class="cx"> [JSC] Add support for MADD, MSUB and MNEG to Air
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGAbstractHeaph"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractHeap.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractHeap.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractHeap.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2013-2016 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2013-2015 Apple Inc. All rights reserved.
</ins><span class="cx"> *
</span><span class="cx"> * Redistribution and use in source and binary forms, with or without
</span><span class="cx"> * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -58,7 +58,6 @@
</span><span class="cx"> macro(JSCell_typeInfoType) \
</span><span class="cx"> macro(JSObject_butterfly) \
</span><span class="cx"> macro(JSPropertyNameEnumerator_cachedPropertyNames) \
</span><del>- macro(RegExpObject_lastIndex) \
</del><span class="cx"> macro(NamedProperties) \
</span><span class="cx"> macro(IndexedInt32Properties) \
</span><span class="cx"> macro(IndexedDoubleProperties) \
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGAbstractInterpreterInlinesh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1882,13 +1882,6 @@
</span><span class="cx">
</span><span class="cx"> case PutClosureVar:
</span><span class="cx"> break;
</span><del>-
- case GetRegExpObjectLastIndex:
- forNode(node).makeHeapTop();
- break;
-
- case SetRegExpObjectLastIndex:
- break;
</del><span class="cx">
</span><span class="cx"> case GetFromArguments:
</span><span class="cx"> forNode(node).makeHeapTop();
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGClobberizeh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGClobberize.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGClobberize.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGClobberize.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -908,16 +908,6 @@
</span><span class="cx"> write(AbstractHeap(ScopeProperties, node->scopeOffset().offset()));
</span><span class="cx"> def(HeapLocation(ClosureVariableLoc, AbstractHeap(ScopeProperties, node->scopeOffset().offset()), node->child1()), LazyNode(node->child2().node()));
</span><span class="cx"> return;
</span><del>-
- case GetRegExpObjectLastIndex:
- read(RegExpObject_lastIndex);
- def(HeapLocation(RegExpObjectLastIndexLoc, RegExpObject_lastIndex, node->child1()), LazyNode(node));
- return;
-
- case SetRegExpObjectLastIndex:
- write(RegExpObject_lastIndex);
- def(HeapLocation(RegExpObjectLastIndexLoc, RegExpObject_lastIndex, node->child1()), LazyNode(node->child2().node()));
- return;
</del><span class="cx">
</span><span class="cx"> case GetFromArguments: {
</span><span class="cx"> AbstractHeap heap(DirectArgumentsProperties, node->capturedArgumentsOffset().offset());
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGDoesGCcpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGDoesGC.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGDoesGC.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGDoesGC.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -113,8 +113,6 @@
</span><span class="cx"> case SkipScope:
</span><span class="cx"> case GetClosureVar:
</span><span class="cx"> case PutClosureVar:
</span><del>- case GetRegExpObjectLastIndex:
- case SetRegExpObjectLastIndex:
</del><span class="cx"> case GetGlobalVar:
</span><span class="cx"> case GetGlobalLexicalVariable:
</span><span class="cx"> case PutGlobalVariable:
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGFixupPhasecpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGFixupPhase.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGFixupPhase.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGFixupPhase.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1076,21 +1076,11 @@
</span><span class="cx"> && !m_graph.hasExitSite(node->origin.semantic, BadCache)
</span><span class="cx"> && !m_graph.hasExitSite(node->origin.semantic, BadIndexingType)
</span><span class="cx"> && !m_graph.hasExitSite(node->origin.semantic, ExoticObjectMode)) {
</span><del>-
</del><span class="cx"> auto uid = m_graph.identifiers()[node->identifierNumber()];
</span><del>-
</del><span class="cx"> if (uid == vm().propertyNames->length.impl()) {
</span><span class="cx"> attemptToMakeGetArrayLength(node);
</span><span class="cx"> break;
</span><span class="cx"> }
</span><del>-
- if (uid == vm().propertyNames->lastIndex.impl()
- && node->child1()->shouldSpeculateRegExpObject()) {
- node->setOp(GetRegExpObjectLastIndex);
- node->clearFlags(NodeMustGenerate);
- fixEdge<RegExpObjectUse>(node->child1());
- break;
- }
</del><span class="cx"> }
</span><span class="cx">
</span><span class="cx"> if (node->child1()->shouldSpeculateCell())
</span><span class="lines">@@ -1101,23 +1091,6 @@
</span><span class="cx"> case PutById:
</span><span class="cx"> case PutByIdFlush:
</span><span class="cx"> case PutByIdDirect: {
</span><del>- if (node->child1()->shouldSpeculateCellOrOther()
- && !m_graph.hasExitSite(node->origin.semantic, BadType)
- && !m_graph.hasExitSite(node->origin.semantic, BadCache)
- && !m_graph.hasExitSite(node->origin.semantic, BadIndexingType)
- && !m_graph.hasExitSite(node->origin.semantic, ExoticObjectMode)) {
-
- auto uid = m_graph.identifiers()[node->identifierNumber()];
-
- if (uid == vm().propertyNames->lastIndex.impl()
- && node->child1()->shouldSpeculateRegExpObject()) {
- node->setOp(SetRegExpObjectLastIndex);
- fixEdge<RegExpObjectUse>(node->child1());
- speculateForBarrier(node->child2());
- break;
- }
- }
-
</del><span class="cx"> fixEdge<CellUse>(node->child1());
</span><span class="cx"> break;
</span><span class="cx"> }
</span><span class="lines">@@ -1298,8 +1271,6 @@
</span><span class="cx"> case KillStack:
</span><span class="cx"> case GetStack:
</span><span class="cx"> case StoreBarrier:
</span><del>- case GetRegExpObjectLastIndex:
- case SetRegExpObjectLastIndex:
</del><span class="cx"> // These are just nodes that we don't currently expect to see during fixup.
</span><span class="cx"> // If we ever wanted to insert them prior to fixup, then we just have to create
</span><span class="cx"> // fixup rules for them.
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGHeapLocationcpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2014-2016 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2014, 2015 Apple Inc. All rights reserved.
</ins><span class="cx"> *
</span><span class="cx"> * Redistribution and use in source and binary forms, with or without
</span><span class="cx"> * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -147,10 +147,6 @@
</span><span class="cx"> case StructureLoc:
</span><span class="cx"> out.print("StructureLoc");
</span><span class="cx"> return;
</span><del>-
- case RegExpObjectLastIndexLoc:
- out.print("RegExpObjectLastIndexLoc");
- return;
</del><span class="cx"> }
</span><span class="cx">
</span><span class="cx"> RELEASE_ASSERT_NOT_REACHED();
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGHeapLocationh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGHeapLocation.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2014-2016 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2014, 2015 Apple Inc. All rights reserved.
</ins><span class="cx"> *
</span><span class="cx"> * Redistribution and use in source and binary forms, with or without
</span><span class="cx"> * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -54,7 +54,6 @@
</span><span class="cx"> IsFunctionLoc,
</span><span class="cx"> IsObjectOrNullLoc,
</span><span class="cx"> NamedPropertyLoc,
</span><del>- RegExpObjectLastIndexLoc,
</del><span class="cx"> SetterLoc,
</span><span class="cx"> StructureLoc,
</span><span class="cx"> TypedArrayByteOffsetLoc,
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGNodeTypeh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGNodeType.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGNodeType.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGNodeType.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -219,8 +219,6 @@
</span><span class="cx"> macro(PutGlobalVariable, NodeMustGenerate) \
</span><span class="cx"> macro(NotifyWrite, NodeMustGenerate) \
</span><span class="cx"> macro(VarInjectionWatchpoint, NodeMustGenerate) \
</span><del>- macro(GetRegExpObjectLastIndex, NodeResultJS) \
- macro(SetRegExpObjectLastIndex, NodeMustGenerate) \
</del><span class="cx"> macro(CheckCell, NodeMustGenerate) \
</span><span class="cx"> macro(CheckNotEmpty, NodeMustGenerate) \
</span><span class="cx"> macro(CheckBadCell, NodeMustGenerate) \
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGPredictionPropagationPhasecpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGPredictionPropagationPhase.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -665,9 +665,7 @@
</span><span class="cx"> case PutStack:
</span><span class="cx"> case KillStack:
</span><span class="cx"> case StoreBarrier:
</span><del>- case GetStack:
- case GetRegExpObjectLastIndex:
- case SetRegExpObjectLastIndex: {
</del><ins>+ case GetStack: {
</ins><span class="cx"> // This node should never be visible at this stage of compilation. It is
</span><span class="cx"> // inserted by fixup(), which follows this phase.
</span><span class="cx"> DFG_CRASH(m_graph, node, "Unexpected node during prediction propagation");
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSafeToExecuteh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSafeToExecute.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSafeToExecute.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSafeToExecute.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -333,8 +333,6 @@
</span><span class="cx"> case ForwardVarargs:
</span><span class="cx"> case CopyRest:
</span><span class="cx"> case StringReplace:
</span><del>- case GetRegExpObjectLastIndex:
- case SetRegExpObjectLastIndex:
</del><span class="cx"> return true;
</span><span class="cx">
</span><span class="cx"> case BottomValue:
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJITcpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -7597,33 +7597,6 @@
</span><span class="cx"> noResult(node);
</span><span class="cx"> }
</span><span class="cx">
</span><del>-void SpeculativeJIT::compileGetRegExpObjectLastIndex(Node* node)
-{
- SpeculateCellOperand regExp(this, node->child1());
- JSValueRegsTemporary result(this);
- GPRReg regExpGPR = regExp.gpr();
- JSValueRegs resultRegs = result.regs();
- speculateRegExpObject(node->child1(), regExpGPR);
- m_jit.loadValue(JITCompiler::Address(regExpGPR, RegExpObject::offsetOfLastIndex()), resultRegs);
- jsValueResult(resultRegs, node);
-}
-
-void SpeculativeJIT::compileSetRegExpObjectLastIndex(Node* node)
-{
- SpeculateCellOperand regExp(this, node->child1());
- JSValueOperand value(this, node->child2());
- GPRReg regExpGPR = regExp.gpr();
- JSValueRegs valueRegs = value.jsValueRegs();
- speculateRegExpObject(node->child1(), regExpGPR);
- speculationCheck(
- ExoticObjectMode, JSValueRegs(), nullptr,
- m_jit.branchTest8(
- JITCompiler::Zero,
- JITCompiler::Address(regExpGPR, RegExpObject::offsetOfLastIndexIsWritable())));
- m_jit.storeValue(valueRegs, JITCompiler::Address(regExpGPR, RegExpObject::offsetOfLastIndex()));
- noResult(node);
-}
-
</del><span class="cx"> } } // namespace JSC::DFG
</span><span class="cx">
</span><span class="cx"> #endif
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJITh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -2335,8 +2335,6 @@
</span><span class="cx"> void compilePutAccessorById(Node*);
</span><span class="cx"> void compilePutGetterSetterById(Node*);
</span><span class="cx"> void compilePutAccessorByVal(Node*);
</span><del>- void compileGetRegExpObjectLastIndex(Node*);
- void compileSetRegExpObjectLastIndex(Node*);
</del><span class="cx">
</span><span class="cx"> void moveTrueTo(GPRReg);
</span><span class="cx"> void moveFalseTo(GPRReg);
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJIT32_64cpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT32_64.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -2978,17 +2978,7 @@
</span><span class="cx"> cellResult(resultPayload.gpr(), node);
</span><span class="cx"> break;
</span><span class="cx"> }
</span><del>-
- case GetRegExpObjectLastIndex: {
- compileGetRegExpObjectLastIndex(node);
- break;
- }
</del><span class="cx">
</span><del>- case SetRegExpObjectLastIndex: {
- compileSetRegExpObjectLastIndex(node);
- break;
- }
-
</del><span class="cx"> case ArrayPush: {
</span><span class="cx"> ASSERT(node->arrayMode().isJSArray());
</span><span class="cx">
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGSpeculativeJIT64cpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -3119,16 +3119,6 @@
</span><span class="cx"> break;
</span><span class="cx"> }
</span><span class="cx">
</span><del>- case GetRegExpObjectLastIndex: {
- compileGetRegExpObjectLastIndex(node);
- break;
- }
-
- case SetRegExpObjectLastIndex: {
- compileSetRegExpObjectLastIndex(node);
- break;
- }
-
</del><span class="cx"> case ArrayPush: {
</span><span class="cx"> ASSERT(node->arrayMode().isJSArray());
</span><span class="cx">
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoredfgDFGStoreBarrierInsertionPhasecpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGStoreBarrierInsertionPhase.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGStoreBarrierInsertionPhase.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/dfg/DFGStoreBarrierInsertionPhase.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2015-2016 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2015 Apple Inc. All rights reserved.
</ins><span class="cx"> *
</span><span class="cx"> * Redistribution and use in source and binary forms, with or without
</span><span class="cx"> * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -260,7 +260,6 @@
</span><span class="cx">
</span><span class="cx"> case PutClosureVar:
</span><span class="cx"> case PutToArguments:
</span><del>- case SetRegExpObjectLastIndex:
</del><span class="cx"> case MultiPutByOffset: {
</span><span class="cx"> considerBarrier(m_node->child1(), m_node->child2());
</span><span class="cx"> break;
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLAbstractHeapRepositorycpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -39,7 +39,6 @@
</span><span class="cx"> #include "JSPropertyNameEnumerator.h"
</span><span class="cx"> #include "JSScope.h"
</span><span class="cx"> #include "JSCInlines.h"
</span><del>-#include "RegExpObject.h"
</del><span class="cx"> #include "ScopedArguments.h"
</span><span class="cx"> #include "ScopedArgumentsTable.h"
</span><span class="cx">
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLAbstractHeapRepositoryh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLAbstractHeapRepository.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -77,8 +77,6 @@
</span><span class="cx"> macro(JSSymbolTableObject_symbolTable, JSSymbolTableObject::offsetOfSymbolTable()) \
</span><span class="cx"> macro(JSWrapperObject_internalValue, JSWrapperObject::internalValueOffset()) \
</span><span class="cx"> macro(MarkedAllocator_freeListHead, MarkedAllocator::offsetOfFreeListHead()) \
</span><del>- macro(RegExpObject_lastIndex, RegExpObject::offsetOfLastIndex()) \
- macro(RegExpObject_lastIndexIsWritable, RegExpObject::offsetOfLastIndexIsWritable()) \
</del><span class="cx"> macro(ScopedArguments_overrodeThings, ScopedArguments::offsetOfOverrodeThings()) \
</span><span class="cx"> macro(ScopedArguments_scope, ScopedArguments::offsetOfScope()) \
</span><span class="cx"> macro(ScopedArguments_table, ScopedArguments::offsetOfTable()) \
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLCapabilitiescpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLCapabilities.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLCapabilities.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLCapabilities.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -224,8 +224,6 @@
</span><span class="cx"> case RegExpTest:
</span><span class="cx"> case NewRegexp:
</span><span class="cx"> case StringReplace:
</span><del>- case GetRegExpObjectLastIndex:
- case SetRegExpObjectLastIndex:
</del><span class="cx"> // These are OK.
</span><span class="cx"> break;
</span><span class="cx">
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreftlFTLLowerDFGToB3cpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -926,12 +926,6 @@
</span><span class="cx"> case StringReplace:
</span><span class="cx"> compileStringReplace();
</span><span class="cx"> break;
</span><del>- case GetRegExpObjectLastIndex:
- compileGetRegExpObjectLastIndex();
- break;
- case SetRegExpObjectLastIndex:
- compileSetRegExpObjectLastIndex();
- break;
</del><span class="cx">
</span><span class="cx"> case PhantomLocal:
</span><span class="cx"> case LoopHint:
</span><span class="lines">@@ -6495,7 +6489,8 @@
</span><span class="cx"> if (JSString* replace = m_node->child3()->dynamicCastConstant<JSString*>()) {
</span><span class="cx"> if (!replace->length()) {
</span><span class="cx"> LValue string = lowString(m_node->child1());
</span><del>- LValue regExp = lowRegExpObject(m_node->child2());
</del><ins>+ LValue regExp = lowCell(m_node->child2());
+ speculateRegExpObject(m_node->child2(), regExp);
</ins><span class="cx">
</span><span class="cx"> LValue result = vmCall(
</span><span class="cx"> Int64, m_out.operation(operationStringProtoFuncReplaceRegExpEmptyStr),
</span><span class="lines">@@ -6507,7 +6502,8 @@
</span><span class="cx"> }
</span><span class="cx">
</span><span class="cx"> LValue string = lowString(m_node->child1());
</span><del>- LValue regExp = lowRegExpObject(m_node->child2());
</del><ins>+ LValue regExp = lowCell(m_node->child2());
+ speculateRegExpObject(m_node->child2(), regExp);
</ins><span class="cx"> LValue replace = lowString(m_node->child3());
</span><span class="cx">
</span><span class="cx"> LValue result = vmCall(
</span><span class="lines">@@ -6526,23 +6522,6 @@
</span><span class="cx"> setJSValue(result);
</span><span class="cx"> }
</span><span class="cx">
</span><del>- void compileGetRegExpObjectLastIndex()
- {
- setJSValue(m_out.load64(lowRegExpObject(m_node->child1()), m_heaps.RegExpObject_lastIndex));
- }
-
- void compileSetRegExpObjectLastIndex()
- {
- LValue regExp = lowRegExpObject(m_node->child1());
- LValue value = lowJSValue(m_node->child2());
-
- speculate(
- ExoticObjectMode, noValue(), nullptr,
- m_out.isZero32(m_out.load8ZeroExt32(regExp, m_heaps.RegExpObject_lastIndexIsWritable)));
-
- m_out.store64(value, regExp, m_heaps.RegExpObject_lastIndex);
- }
-
</del><span class="cx"> LValue didOverflowStack()
</span><span class="cx"> {
</span><span class="cx"> // This does a very simple leaf function analysis. The invariant of FTL call
</span><span class="lines">@@ -8971,13 +8950,6 @@
</span><span class="cx"> speculateObject(edge, result);
</span><span class="cx"> return result;
</span><span class="cx"> }
</span><del>-
- LValue lowRegExpObject(Edge edge)
- {
- LValue result = lowCell(edge);
- speculateRegExpObject(edge, result);
- return result;
- }
</del><span class="cx">
</span><span class="cx"> LValue lowString(Edge edge, OperandSpeculationMode mode = AutomaticOperandSpeculation)
</span><span class="cx"> {
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit212SourceJavaScriptCoreruntimeRegExpObjecth"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/runtime/RegExpObject.h (198278 => 198279)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/runtime/RegExpObject.h 2016-03-16 15:15:54 UTC (rev 198278)
+++ releases/WebKitGTK/webkit-2.12/Source/JavaScriptCore/runtime/RegExpObject.h 2016-03-16 15:16:37 UTC (rev 198279)
</span><span class="lines">@@ -79,16 +79,6 @@
</span><span class="cx"> return Structure::create(vm, globalObject, prototype, TypeInfo(RegExpObjectType, StructureFlags), info());
</span><span class="cx"> }
</span><span class="cx">
</span><del>- static ptrdiff_t offsetOfLastIndex()
- {
- return OBJECT_OFFSETOF(RegExpObject, m_lastIndex);
- }
-
- static ptrdiff_t offsetOfLastIndexIsWritable()
- {
- return OBJECT_OFFSETOF(RegExpObject, m_lastIndexIsWritable);
- }
-
</del><span class="cx"> protected:
</span><span class="cx"> JS_EXPORT_PRIVATE RegExpObject(VM&, Structure*, RegExp*);
</span><span class="cx"> JS_EXPORT_PRIVATE void finishCreation(VM&);
</span></span></pre>
</div>
</div>
</body>
</html>