<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[206104] trunk/Source/JavaScriptCore</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd><a href="http://trac.webkit.org/projects/webkit/changeset/206104">206104</a></dd>
<dt>Author</dt> <dd>utatane.tea@gmail.com</dd>
<dt>Date</dt> <dd>2016-09-19 11:46:07 -0700 (Mon, 19 Sep 2016)</dd>
</dl>

<h3>Log Message</h3>
<pre>[JSC] Use is_cell_with_type for @isRegExpObject, @isMap, and @isSet
https://bugs.webkit.org/show_bug.cgi?id=162142

Reviewed by Michael Saboff.

Use is_cell_with_type for @isRegExpObject, @isMap and @isSet.
Previously, they were implemented as functions and only @isRegExpObject was handled in the DFG and FTL.
The recently added op_is_cell_with_type bytecode and DFG IsCellWithType node allows us to simplify the above checks in all JIT tiers.
Changed these checks to bytecode intrinsics using op_is_cell_with_type.

* builtins/BuiltinNames.h:
* bytecode/BytecodeIntrinsicRegistry.h:
* bytecode/SpeculatedType.cpp:
(JSC::speculationFromJSType):
* bytecompiler/BytecodeGenerator.h:
(JSC::BytecodeGenerator::emitIsRegExpObject):
(JSC::BytecodeGenerator::emitIsMap):
(JSC::BytecodeGenerator::emitIsSet):
(JSC::BytecodeGenerator::emitIsProxyObject): Deleted.
* bytecompiler/NodesCodegen.cpp:
(JSC::BytecodeIntrinsicNode::emit_intrinsic_isRegExpObject):
(JSC::BytecodeIntrinsicNode::emit_intrinsic_isMap):
(JSC::BytecodeIntrinsicNode::emit_intrinsic_isSet):
* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::handleIntrinsicCall):
* runtime/ECMAScriptSpecInternalFunctions.cpp:
(JSC::esSpecIsRegExpObject): Deleted.
* runtime/ECMAScriptSpecInternalFunctions.h:
* runtime/Intrinsic.h:
* runtime/JSGlobalObject.cpp:
(JSC::JSGlobalObject::init):
* runtime/MapPrototype.cpp:
(JSC::privateFuncIsMap): Deleted.
* runtime/MapPrototype.h:
* runtime/SetPrototype.cpp:
(JSC::privateFuncIsSet): Deleted.
* runtime/SetPrototype.h:</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#trunkSourceJavaScriptCoreChangeLog">trunk/Source/JavaScriptCore/ChangeLog</a></li>
<li><a href="#trunkSourceJavaScriptCorebuiltinsBuiltinNamesh">trunk/Source/JavaScriptCore/builtins/BuiltinNames.h</a></li>
<li><a href="#trunkSourceJavaScriptCorebytecodeBytecodeIntrinsicRegistryh">trunk/Source/JavaScriptCore/bytecode/BytecodeIntrinsicRegistry.h</a></li>
<li><a href="#trunkSourceJavaScriptCorebytecodeSpeculatedTypecpp">trunk/Source/JavaScriptCore/bytecode/SpeculatedType.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCorebytecompilerBytecodeGeneratorh">trunk/Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h</a></li>
<li><a href="#trunkSourceJavaScriptCorebytecompilerNodesCodegencpp">trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoredfgDFGByteCodeParsercpp">trunk/Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeECMAScriptSpecInternalFunctionscpp">trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeECMAScriptSpecInternalFunctionsh">trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeIntrinsich">trunk/Source/JavaScriptCore/runtime/Intrinsic.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeJSGlobalObjectcpp">trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeMapPrototypecpp">trunk/Source/JavaScriptCore/runtime/MapPrototype.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeMapPrototypeh">trunk/Source/JavaScriptCore/runtime/MapPrototype.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeSetPrototypecpp">trunk/Source/JavaScriptCore/runtime/SetPrototype.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeSetPrototypeh">trunk/Source/JavaScriptCore/runtime/SetPrototype.h</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="trunkSourceJavaScriptCoreChangeLog"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/ChangeLog (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/ChangeLog        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/ChangeLog        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -1,3 +1,43 @@
</span><ins>+2016-09-19  Yusuke Suzuki  &lt;utatane.tea@gmail.com&gt;
+
+        [JSC] Use is_cell_with_type for @isRegExpObject, @isMap, and @isSet
+        https://bugs.webkit.org/show_bug.cgi?id=162142
+
+        Reviewed by Michael Saboff.
+
+        Use is_cell_with_type for @isRegExpObject, @isMap and @isSet.
+        Previously, they were implemented as functions and only @isRegExpObject was handled in the DFG and FTL.
+        The recently added op_is_cell_with_type bytecode and DFG IsCellWithType node allows us to simplify the above checks in all JIT tiers.
+        Changed these checks to bytecode intrinsics using op_is_cell_with_type.
+
+        * builtins/BuiltinNames.h:
+        * bytecode/BytecodeIntrinsicRegistry.h:
+        * bytecode/SpeculatedType.cpp:
+        (JSC::speculationFromJSType):
+        * bytecompiler/BytecodeGenerator.h:
+        (JSC::BytecodeGenerator::emitIsRegExpObject):
+        (JSC::BytecodeGenerator::emitIsMap):
+        (JSC::BytecodeGenerator::emitIsSet):
+        (JSC::BytecodeGenerator::emitIsProxyObject): Deleted.
+        * bytecompiler/NodesCodegen.cpp:
+        (JSC::BytecodeIntrinsicNode::emit_intrinsic_isRegExpObject):
+        (JSC::BytecodeIntrinsicNode::emit_intrinsic_isMap):
+        (JSC::BytecodeIntrinsicNode::emit_intrinsic_isSet):
+        * dfg/DFGByteCodeParser.cpp:
+        (JSC::DFG::ByteCodeParser::handleIntrinsicCall):
+        * runtime/ECMAScriptSpecInternalFunctions.cpp:
+        (JSC::esSpecIsRegExpObject): Deleted.
+        * runtime/ECMAScriptSpecInternalFunctions.h:
+        * runtime/Intrinsic.h:
+        * runtime/JSGlobalObject.cpp:
+        (JSC::JSGlobalObject::init):
+        * runtime/MapPrototype.cpp:
+        (JSC::privateFuncIsMap): Deleted.
+        * runtime/MapPrototype.h:
+        * runtime/SetPrototype.cpp:
+        (JSC::privateFuncIsSet): Deleted.
+        * runtime/SetPrototype.h:
+
</ins><span class="cx"> 2016-09-19  Brian Burg  &lt;bburg@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         Web Replay: teach the replay inputs generator to encode and decode OptionSet&lt;T&gt;
</span></span></pre></div>
<a id="trunkSourceJavaScriptCorebuiltinsBuiltinNamesh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/builtins/BuiltinNames.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/builtins/BuiltinNames.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/builtins/BuiltinNames.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -130,13 +130,10 @@
</span><span class="cx">     macro(isArrayConstructor) \
</span><span class="cx">     macro(isConstructor) \
</span><span class="cx">     macro(isDerivedConstructor) \
</span><del>-    macro(isRegExpObject) \
</del><span class="cx">     macro(concatMemcpy) \
</span><span class="cx">     macro(appendMemcpy) \
</span><span class="cx">     macro(predictFinalLengthFromArgumunts) \
</span><span class="cx">     macro(print) \
</span><del>-    macro(isSet) \
-    macro(isMap) \
</del><span class="cx">     macro(regExpCreate) \
</span><span class="cx">     macro(SetIterator) \
</span><span class="cx">     macro(setIteratorNext) \
</span></span></pre></div>
<a id="trunkSourceJavaScriptCorebytecodeBytecodeIntrinsicRegistryh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/bytecode/BytecodeIntrinsicRegistry.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/bytecode/BytecodeIntrinsicRegistry.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/bytecode/BytecodeIntrinsicRegistry.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -45,6 +45,9 @@
</span><span class="cx">     macro(isJSArray) \
</span><span class="cx">     macro(isProxyObject) \
</span><span class="cx">     macro(isDerivedArray) \
</span><ins>+    macro(isRegExpObject) \
+    macro(isMap) \
+    macro(isSet) \
</ins><span class="cx">     macro(tailCallForwardArguments) \
</span><span class="cx">     macro(tryGetById) \
</span><span class="cx">     macro(putByValDirect) \
</span></span></pre></div>
<a id="trunkSourceJavaScriptCorebytecodeSpeculatedTypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/bytecode/SpeculatedType.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/bytecode/SpeculatedType.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/bytecode/SpeculatedType.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -484,6 +484,10 @@
</span><span class="cx">         return SpecRegExpObject;
</span><span class="cx">     case ProxyObjectType:
</span><span class="cx">         return SpecProxyObject;
</span><ins>+    case JSMapType:
+        return SpecMapObject;
+    case JSSetType:
+        return SpecSetObject;
</ins><span class="cx">     default:
</span><span class="cx">         ASSERT_NOT_REACHED();
</span><span class="cx">     }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCorebytecompilerBytecodeGeneratorh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -633,6 +633,9 @@
</span><span class="cx">         RegisterID* emitIsCellWithType(RegisterID* dst, RegisterID* src, JSType);
</span><span class="cx">         RegisterID* emitIsJSArray(RegisterID* dst, RegisterID* src) { return emitIsCellWithType(dst, src, ArrayType); }
</span><span class="cx">         RegisterID* emitIsProxyObject(RegisterID* dst, RegisterID* src) { return emitIsCellWithType(dst, src, ProxyObjectType); }
</span><ins>+        RegisterID* emitIsRegExpObject(RegisterID* dst, RegisterID* src) { return emitIsCellWithType(dst, src, RegExpObjectType); }
+        RegisterID* emitIsMap(RegisterID* dst, RegisterID* src) { return emitIsCellWithType(dst, src, JSMapType); }
+        RegisterID* emitIsSet(RegisterID* dst, RegisterID* src) { return emitIsCellWithType(dst, src, JSSetType); }
</ins><span class="cx">         RegisterID* emitIsObject(RegisterID* dst, RegisterID* src);
</span><span class="cx">         RegisterID* emitIsUndefined(RegisterID* dst, RegisterID* src);
</span><span class="cx">         RegisterID* emitIsEmpty(RegisterID* dst, RegisterID* src);
</span></span></pre></div>
<a id="trunkSourceJavaScriptCorebytecompilerNodesCodegencpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -953,6 +953,15 @@
</span><span class="cx">     return generator.moveToDestinationIfNeeded(dst, generator.emitIsProxyObject(generator.tempDestination(dst), src.get()));
</span><span class="cx"> }
</span><span class="cx"> 
</span><ins>+RegisterID* BytecodeIntrinsicNode::emit_intrinsic_isRegExpObject(JSC::BytecodeGenerator&amp; generator, JSC::RegisterID* dst)
+{
+    ArgumentListNode* node = m_args-&gt;m_listNode;
+    RefPtr&lt;RegisterID&gt; src = generator.emitNode(node);
+    ASSERT(!node-&gt;m_next);
+
+    return generator.moveToDestinationIfNeeded(dst, generator.emitIsRegExpObject(generator.tempDestination(dst), src.get()));
+}
+
</ins><span class="cx"> RegisterID* BytecodeIntrinsicNode::emit_intrinsic_isObject(BytecodeGenerator&amp; generator, RegisterID* dst)
</span><span class="cx"> {
</span><span class="cx">     ArgumentListNode* node = m_args-&gt;m_listNode;
</span><span class="lines">@@ -971,6 +980,24 @@
</span><span class="cx">     return generator.moveToDestinationIfNeeded(dst, generator.emitIsDerivedArray(generator.tempDestination(dst), src.get()));
</span><span class="cx"> }
</span><span class="cx"> 
</span><ins>+RegisterID* BytecodeIntrinsicNode::emit_intrinsic_isMap(JSC::BytecodeGenerator&amp; generator, JSC::RegisterID* dst)
+{
+    ArgumentListNode* node = m_args-&gt;m_listNode;
+    RefPtr&lt;RegisterID&gt; src = generator.emitNode(node);
+    ASSERT(!node-&gt;m_next);
+
+    return generator.moveToDestinationIfNeeded(dst, generator.emitIsMap(generator.tempDestination(dst), src.get()));
+}
+
+RegisterID* BytecodeIntrinsicNode::emit_intrinsic_isSet(JSC::BytecodeGenerator&amp; generator, JSC::RegisterID* dst)
+{
+    ArgumentListNode* node = m_args-&gt;m_listNode;
+    RefPtr&lt;RegisterID&gt; src = generator.emitNode(node);
+    ASSERT(!node-&gt;m_next);
+
+    return generator.moveToDestinationIfNeeded(dst, generator.emitIsSet(generator.tempDestination(dst), src.get()));
+}
+
</ins><span class="cx"> RegisterID* BytecodeIntrinsicNode::emit_intrinsic_newArrayWithSize(JSC::BytecodeGenerator&amp; generator, JSC::RegisterID* dst)
</span><span class="cx"> {
</span><span class="cx">     ArgumentListNode* node = m_args-&gt;m_listNode;
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoredfgDFGByteCodeParsercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -2362,15 +2362,6 @@
</span><span class="cx">         return true;
</span><span class="cx">     }
</span><span class="cx"> 
</span><del>-    case IsRegExpObjectIntrinsic: {
-        ASSERT(argumentCountIncludingThis == 2);
-
-        insertChecks();
-        Node* isRegExpObject = addToGraph(IsCellWithType, OpInfo(RegExpObjectType), get(virtualRegisterForArgument(1, registerOffset)));
-        set(VirtualRegister(resultOperand), isRegExpObject);
-        return true;
-    }
-
</del><span class="cx">     case IsTypedArrayViewIntrinsic: {
</span><span class="cx">         ASSERT(argumentCountIncludingThis == 2);
</span><span class="cx"> 
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeECMAScriptSpecInternalFunctionscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -39,12 +39,4 @@
</span><span class="cx">     return JSValue::encode(jsBoolean(isConstructor));
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-EncodedJSValue JSC_HOST_CALL esSpecIsRegExpObject(ExecState* exec)
-{
-    JSValue value = exec-&gt;uncheckedArgument(0);
-    if (value.isObject())
-        return JSValue::encode(jsBoolean(value.getObject()-&gt;type() == RegExpObjectType));
-    return JSValue::encode(jsBoolean(false));
-}
-
</del><span class="cx"> } // namespace JSC
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeECMAScriptSpecInternalFunctionsh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/ECMAScriptSpecInternalFunctions.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -31,7 +31,6 @@
</span><span class="cx"> namespace JSC {
</span><span class="cx"> 
</span><span class="cx"> EncodedJSValue JSC_HOST_CALL esSpecIsConstructor(ExecState*);
</span><del>-EncodedJSValue JSC_HOST_CALL esSpecIsRegExpObject(ExecState*);
</del><span class="cx"> 
</span><span class="cx"> } // namespace JSC
</span><span class="cx"> 
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeIntrinsich"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/Intrinsic.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/Intrinsic.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/Intrinsic.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -60,7 +60,6 @@
</span><span class="cx">     RandomIntrinsic,
</span><span class="cx">     FRoundIntrinsic,
</span><span class="cx">     TruncIntrinsic,
</span><del>-    IsRegExpObjectIntrinsic,
</del><span class="cx">     IsTypedArrayViewIntrinsic,
</span><span class="cx">     BoundThisNoArgsFunctionCallIntrinsic,
</span><span class="cx">     JSMapGetIntrinsic,
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeJSGlobalObjectcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -746,10 +746,8 @@
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().InternalPromisePrivateName(), internalPromiseConstructor, DontEnum | DontDelete | ReadOnly),
</span><span class="cx"> 
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().repeatCharacterPrivateName(), JSFunction::create(vm, this, 2, String(), stringProtoFuncRepeatCharacter), DontEnum | DontDelete | ReadOnly),
</span><del>-        GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isSetPrivateName(), JSFunction::create(vm, this, 1, String(), privateFuncIsSet), DontEnum | DontDelete | ReadOnly),
</del><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().SetIteratorPrivateName(), JSFunction::create(vm, this, 1, String(), privateFuncSetIterator), DontEnum | DontDelete | ReadOnly),
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().setIteratorNextPrivateName(), JSFunction::create(vm, this, 0, String(), privateFuncSetIteratorNext), DontEnum | DontDelete | ReadOnly),
</span><del>-        GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isMapPrivateName(), JSFunction::create(vm, this, 1, String(), privateFuncIsMap), DontEnum | DontDelete | ReadOnly),
</del><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isArrayPrivateName(), arrayConstructor-&gt;getDirect(vm, vm.propertyNames-&gt;isArray), DontEnum | DontDelete | ReadOnly),
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isArraySlowPrivateName(), privateFuncIsArraySlow, DontEnum | DontDelete | ReadOnly),
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isArrayConstructorPrivateName(), privateFuncIsArrayConstructor, DontEnum | DontDelete | ReadOnly),
</span><span class="lines">@@ -770,7 +768,6 @@
</span><span class="cx"> #endif // ENABLE(INTL)
</span><span class="cx"> 
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isConstructorPrivateName(), JSFunction::create(vm, this, 1, String(), esSpecIsConstructor, NoIntrinsic), DontEnum | DontDelete | ReadOnly),
</span><del>-        GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().isRegExpObjectPrivateName(), JSFunction::create(vm, this, 1, String(), esSpecIsRegExpObject, IsRegExpObjectIntrinsic), DontEnum | DontDelete | ReadOnly),
</del><span class="cx"> 
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().regExpProtoFlagsGetterPrivateName(), regExpProtoFlagsGetterObject, DontEnum | DontDelete | ReadOnly),
</span><span class="cx">         GlobalPropertyInfo(vm.propertyNames-&gt;builtinNames().regExpProtoGlobalGetterPrivateName(), regExpProtoGlobalGetterObject, DontEnum | DontDelete | ReadOnly),
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeMapPrototypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/MapPrototype.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/MapPrototype.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/MapPrototype.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -100,12 +100,6 @@
</span><span class="cx">     return nullptr;
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-EncodedJSValue JSC_HOST_CALL privateFuncIsMap(ExecState* exec)
-{
-    JSValue value = exec-&gt;uncheckedArgument(0);
-    return JSValue::encode(jsBoolean(value.isCell() &amp;&amp; value.asCell()-&gt;type() == JSMapType));
-}
-
</del><span class="cx"> EncodedJSValue JSC_HOST_CALL mapProtoFuncClear(CallFrame* callFrame)
</span><span class="cx"> {
</span><span class="cx">     JSMap* map = getMap(callFrame, callFrame-&gt;thisValue());
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeMapPrototypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/MapPrototype.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/MapPrototype.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/MapPrototype.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -58,7 +58,6 @@
</span><span class="cx">     void finishCreation(VM&amp;, JSGlobalObject*);
</span><span class="cx"> };
</span><span class="cx"> 
</span><del>-EncodedJSValue JSC_HOST_CALL privateFuncIsMap(ExecState*);
</del><span class="cx"> EncodedJSValue JSC_HOST_CALL privateFuncMapIterator(ExecState*);
</span><span class="cx"> EncodedJSValue JSC_HOST_CALL privateFuncMapIteratorNext(ExecState*);
</span><span class="cx"> 
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeSetPrototypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/SetPrototype.cpp (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/SetPrototype.cpp        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/SetPrototype.cpp        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -159,11 +159,6 @@
</span><span class="cx">     return JSValue::encode(JSSetIterator::create(vm, callFrame-&gt;callee()-&gt;globalObject()-&gt;setIteratorStructure(), thisObj, IterateKeyValue));
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-EncodedJSValue JSC_HOST_CALL privateFuncIsSet(ExecState* exec)
-{
-    return JSValue::encode(jsBoolean(jsDynamicCast&lt;JSSet*&gt;(exec-&gt;uncheckedArgument(0))));
-}
-
</del><span class="cx"> EncodedJSValue JSC_HOST_CALL privateFuncSetIterator(ExecState* exec)
</span><span class="cx"> {
</span><span class="cx">     ASSERT(jsDynamicCast&lt;JSSet*&gt;(exec-&gt;uncheckedArgument(0)));
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeSetPrototypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/SetPrototype.h (206103 => 206104)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/SetPrototype.h        2016-09-19 18:38:15 UTC (rev 206103)
+++ trunk/Source/JavaScriptCore/runtime/SetPrototype.h        2016-09-19 18:46:07 UTC (rev 206104)
</span><span class="lines">@@ -58,7 +58,6 @@
</span><span class="cx">     void finishCreation(VM&amp;, JSGlobalObject*);
</span><span class="cx"> };
</span><span class="cx"> 
</span><del>-EncodedJSValue JSC_HOST_CALL privateFuncIsSet(ExecState*);
</del><span class="cx"> EncodedJSValue JSC_HOST_CALL privateFuncSetIterator(ExecState*);
</span><span class="cx"> EncodedJSValue JSC_HOST_CALL privateFuncSetIteratorNext(ExecState*);
</span><span class="cx"> 
</span></span></pre>
</div>
</div>

</body>
</html>