<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[286042] trunk/Source</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd><a href="http://trac.webkit.org/projects/webkit/changeset/286042">286042</a></dd>
<dt>Author</dt> <dd>mark.lam@apple.com</dd>
<dt>Date</dt> <dd>2021-11-18 19:03:45 -0800 (Thu, 18 Nov 2021)</dd>
</dl>

<h3>Log Message</h3>
<pre>SubSpace constructors should take a const HeapCellType& instead of a HeapCellType*.
https://bugs.webkit.org/show_bug.cgi?id=233341
rdar://85573277

Reviewed by Yusuke Suzuki.

Source/JavaScriptCore:

This helps document that HeapCellTypes are immutable once they are instantiated,
and that SubSpaces won't be modifying them.

Also remove the const on CellAttributes return values since it is not needed nor
meaningful.

* heap/BlockDirectory.h:
(JSC::BlockDirectory::attributes const):
* heap/CompleteSubspace.cpp:
(JSC::CompleteSubspace::CompleteSubspace):
* heap/CompleteSubspace.h:
* heap/HeapCellType.cpp:
(JSC::HeapCellType::finishSweep const):
(JSC::HeapCellType::destroy const):
(JSC::HeapCellType::finishSweep): Deleted.
(JSC::HeapCellType::destroy): Deleted.
* heap/HeapCellType.h:
(JSC::HeapCellType::attributes const):
* heap/IsoHeapCellType.cpp:
(JSC::IsoHeapCellType::finishSweep const):
(JSC::IsoHeapCellType::destroy const):
(JSC::IsoHeapCellType::finishSweep): Deleted.
(JSC::IsoHeapCellType::destroy): Deleted.
* heap/IsoHeapCellType.h:
* heap/IsoInlinedHeapCellType.h:
* heap/IsoSubspace.cpp:
(JSC::IsoSubspace::IsoSubspace):
* heap/IsoSubspace.h:
* heap/IsoSubspacePerVM.cpp:
(JSC::IsoSubspacePerVM::forVM):
* heap/IsoSubspacePerVM.h:
* heap/MarkedBlock.h:
(JSC::MarkedBlock::Handle::attributes const):
(JSC::MarkedBlock::attributes const):
* heap/PreciseAllocation.h:
(JSC::PreciseAllocation::attributes const):
* heap/Subspace.cpp:
(JSC::Subspace::initialize):
* heap/Subspace.h:
(JSC::Subspace::heapCellType const):
* heap/SubspaceInlines.h:
(JSC::Subspace::attributes const):
* runtime/JSDestructibleObjectHeapCellType.cpp:
(JSC::JSDestructibleObjectHeapCellType::finishSweep const):
(JSC::JSDestructibleObjectHeapCellType::destroy const):
(JSC::JSDestructibleObjectHeapCellType::finishSweep): Deleted.
(JSC::JSDestructibleObjectHeapCellType::destroy): Deleted.
* runtime/JSDestructibleObjectHeapCellType.h:
* runtime/VM.cpp:
(JSC::VM::VM):

Source/WebCore:

* bindings/js/JSFileSystemDirectoryHandleIterator.cpp:
(WebCore::JSFileSystemDirectoryHandleIterator::subspaceForImpl):
* bindings/js/WebCoreJSClientData.cpp:
(WebCore::JSVMClientData::JSVMClientData):
* bindings/scripts/CodeGeneratorJS.pm:
(GenerateImplementation):
(GenerateIterableDefinition):
* bindings/scripts/test/JS/JSDOMWindow.cpp:
(WebCore::JSDOMWindow::subspaceForImpl):
* bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp:
(WebCore::JSDedicatedWorkerGlobalScope::subspaceForImpl):
* bindings/scripts/test/JS/JSExposedStar.cpp:
(WebCore::JSExposedStar::subspaceForImpl):
* bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp:
(WebCore::JSExposedToWorkerAndWindow::subspaceForImpl):
* bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp:
(WebCore::JSPaintWorkletGlobalScope::subspaceForImpl):
* bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp:
(WebCore::JSServiceWorkerGlobalScope::subspaceForImpl):
* bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp:
(WebCore::JSSharedWorkerGlobalScope::subspaceForImpl):
* bindings/scripts/test/JS/JSTestCEReactions.cpp:
(WebCore::JSTestCEReactions::subspaceForImpl):
* bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp:
(WebCore::JSTestCEReactionsStringifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestCallTracer.cpp:
(WebCore::JSTestCallTracer::subspaceForImpl):
* bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp:
(WebCore::JSTestClassWithJSBuiltinConstructor::subspaceForImpl):
* bindings/scripts/test/JS/JSTestConditionalIncludes.cpp:
(WebCore::JSTestConditionalIncludes::subspaceForImpl):
* bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp:
(WebCore::JSTestConditionallyReadWrite::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDOMJIT.cpp:
(WebCore::JSTestDOMJIT::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDefaultToJSON.cpp:
(WebCore::JSTestDefaultToJSON::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp:
(WebCore::JSTestDefaultToJSONFilteredByExposed::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp:
(WebCore::JSTestDefaultToJSONIndirectInheritance::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp:
(WebCore::JSTestDefaultToJSONInherit::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp:
(WebCore::JSTestDefaultToJSONInheritFinal::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp:
(WebCore::JSTestDelegateToSharedSyntheticAttribute::subspaceForImpl):
* bindings/scripts/test/JS/JSTestDomainSecurity.cpp:
(WebCore::JSTestDomainSecurity::subspaceForImpl):
* bindings/scripts/test/JS/JSTestEnabledBySetting.cpp:
(WebCore::JSTestEnabledBySetting::subspaceForImpl):
* bindings/scripts/test/JS/JSTestEnabledForContext.cpp:
(WebCore::JSTestEnabledForContext::subspaceForImpl):
* bindings/scripts/test/JS/JSTestEventConstructor.cpp:
(WebCore::JSTestEventConstructor::subspaceForImpl):
* bindings/scripts/test/JS/JSTestEventTarget.cpp:
(WebCore::JSTestEventTarget::subspaceForImpl):
* bindings/scripts/test/JS/JSTestException.cpp:
(WebCore::JSTestException::subspaceForImpl):
* bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp:
(WebCore::JSTestGenerateAddOpaqueRoot::subspaceForImpl):
* bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp:
(WebCore::JSTestGenerateIsReachable::subspaceForImpl):
* bindings/scripts/test/JS/JSTestGlobalObject.cpp:
(WebCore::JSTestGlobalObject::subspaceForImpl):
* bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp:
(WebCore::JSTestIndexedSetterNoIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp:
(WebCore::JSTestIndexedSetterThrowingException::subspaceForImpl):
* bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp:
(WebCore::JSTestIndexedSetterWithIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestInterface.cpp:
(WebCore::jsTestInterfacePrototypeFunction_entriesCaller):
(WebCore::JSTestInterface::subspaceForImpl):
* bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp:
(WebCore::JSTestInterfaceLeadingUnderscore::subspaceForImpl):
* bindings/scripts/test/JS/JSTestIterable.cpp:
(WebCore::jsTestIterablePrototypeFunction_entriesCaller):
(WebCore::JSTestIterable::subspaceForImpl):
* bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp:
(WebCore::JSTestJSBuiltinConstructor::subspaceForImpl):
* bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp:
(WebCore::JSTestLegacyFactoryFunction::subspaceForImpl):
* bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp:
(WebCore::JSTestLegacyNoInterfaceObject::subspaceForImpl):
* bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp:
(WebCore::JSTestLegacyOverrideBuiltIns::subspaceForImpl):
* bindings/scripts/test/JS/JSTestMapLike.cpp:
(WebCore::JSTestMapLike::subspaceForImpl):
* bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp:
(WebCore::JSTestMapLikeWithOverriddenOperations::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp:
(WebCore::JSTestNamedAndIndexedSetterNoIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp:
(WebCore::JSTestNamedAndIndexedSetterThrowingException::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp:
(WebCore::JSTestNamedAndIndexedSetterWithIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp:
(WebCore::JSTestNamedDeleterNoIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp:
(WebCore::JSTestNamedDeleterThrowingException::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp:
(WebCore::JSTestNamedDeleterWithIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp:
(WebCore::JSTestNamedDeleterWithIndexedGetter::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp:
(WebCore::JSTestNamedGetterCallWith::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp:
(WebCore::JSTestNamedGetterNoIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp:
(WebCore::JSTestNamedGetterWithIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp:
(WebCore::JSTestNamedSetterNoIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp:
(WebCore::JSTestNamedSetterThrowingException::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp:
(WebCore::JSTestNamedSetterWithIdentifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp:
(WebCore::JSTestNamedSetterWithIndexedGetter::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp:
(WebCore::JSTestNamedSetterWithIndexedGetterAndSetter::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp:
(WebCore::JSTestNamedSetterWithLegacyOverrideBuiltIns::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp:
(WebCore::JSTestNamedSetterWithLegacyUnforgeableProperties::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp:
(WebCore::JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNamespaceObject.cpp:
(WebCore::JSTestNamespaceObject::subspaceForImpl):
* bindings/scripts/test/JS/JSTestNode.cpp:
(WebCore::jsTestNodePrototypeFunction_entriesCaller):
(WebCore::JSTestNode::subspaceForImpl):
* bindings/scripts/test/JS/JSTestObj.cpp:
(WebCore::JSTestObj::subspaceForImpl):
* bindings/scripts/test/JS/JSTestOperationConditional.cpp:
(WebCore::JSTestOperationConditional::subspaceForImpl):
* bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp:
(WebCore::JSTestOverloadedConstructors::subspaceForImpl):
* bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp:
(WebCore::JSTestOverloadedConstructorsWithSequence::subspaceForImpl):
* bindings/scripts/test/JS/JSTestPluginInterface.cpp:
(WebCore::JSTestPluginInterface::subspaceForImpl):
* bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp:
(WebCore::JSTestPromiseRejectionEvent::subspaceForImpl):
* bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp:
(WebCore::JSTestReadOnlyMapLike::subspaceForImpl):
* bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp:
(WebCore::JSTestReadOnlySetLike::subspaceForImpl):
* bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp:
(WebCore::JSTestReportExtraMemoryCost::subspaceForImpl):
* bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
(WebCore::JSTestSerializedScriptValueInterface::subspaceForImpl):
* bindings/scripts/test/JS/JSTestSetLike.cpp:
(WebCore::JSTestSetLike::subspaceForImpl):
* bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp:
(WebCore::JSTestSetLikeWithOverriddenOperations::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifier.cpp:
(WebCore::JSTestStringifier::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp:
(WebCore::JSTestStringifierAnonymousOperation::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp:
(WebCore::JSTestStringifierNamedOperation::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp:
(WebCore::JSTestStringifierOperationImplementedAs::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp:
(WebCore::JSTestStringifierOperationNamedToString::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp:
(WebCore::JSTestStringifierReadOnlyAttribute::subspaceForImpl):
* bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp:
(WebCore::JSTestStringifierReadWriteAttribute::subspaceForImpl):
* bindings/scripts/test/JS/JSTestTypedefs.cpp:
(WebCore::JSTestTypedefs::subspaceForImpl):
* bindings/scripts/test/JS/JSWorkerGlobalScope.cpp:
(WebCore::JSWorkerGlobalScope::subspaceForImpl):
* bindings/scripts/test/JS/JSWorkletGlobalScope.cpp:
(WebCore::JSWorkletGlobalScope::subspaceForImpl):
* bridge/objc/objc_runtime.mm:
(JSC::Bindings::ObjcFallbackObjectImp::subspaceForImpl):</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#trunkSourceJavaScriptCoreChangeLog">trunk/Source/JavaScriptCore/ChangeLog</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapBlockDirectoryh">trunk/Source/JavaScriptCore/heap/BlockDirectory.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapCompleteSubspacecpp">trunk/Source/JavaScriptCore/heap/CompleteSubspace.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapCompleteSubspaceh">trunk/Source/JavaScriptCore/heap/CompleteSubspace.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapHeapCellTypecpp">trunk/Source/JavaScriptCore/heap/HeapCellType.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapHeapCellTypeh">trunk/Source/JavaScriptCore/heap/HeapCellType.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoHeapCellTypecpp">trunk/Source/JavaScriptCore/heap/IsoHeapCellType.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoHeapCellTypeh">trunk/Source/JavaScriptCore/heap/IsoHeapCellType.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoInlinedHeapCellTypeh">trunk/Source/JavaScriptCore/heap/IsoInlinedHeapCellType.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoSubspacecpp">trunk/Source/JavaScriptCore/heap/IsoSubspace.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoSubspaceh">trunk/Source/JavaScriptCore/heap/IsoSubspace.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoSubspacePerVMcpp">trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapIsoSubspacePerVMh">trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapMarkedBlockh">trunk/Source/JavaScriptCore/heap/MarkedBlock.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapPreciseAllocationh">trunk/Source/JavaScriptCore/heap/PreciseAllocation.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapSubspacecpp">trunk/Source/JavaScriptCore/heap/Subspace.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapSubspaceh">trunk/Source/JavaScriptCore/heap/Subspace.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreheapSubspaceInlinesh">trunk/Source/JavaScriptCore/heap/SubspaceInlines.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeJSDestructibleObjectHeapCellTypecpp">trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.cpp</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeJSDestructibleObjectHeapCellTypeh">trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.h</a></li>
<li><a href="#trunkSourceJavaScriptCoreruntimeVMcpp">trunk/Source/JavaScriptCore/runtime/VM.cpp</a></li>
<li><a href="#trunkSourceWebCoreChangeLog">trunk/Source/WebCore/ChangeLog</a></li>
<li><a href="#trunkSourceWebCorebindingsjsJSFileSystemDirectoryHandleIteratorcpp">trunk/Source/WebCore/bindings/js/JSFileSystemDirectoryHandleIterator.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsjsWebCoreJSClientDatacpp">trunk/Source/WebCore/bindings/js/WebCoreJSClientData.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptsCodeGeneratorJSpm">trunk/Source/WebCore/bindings/scripts/CodeGeneratorJS.pm</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSDOMWindowcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSDOMWindow.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSDedicatedWorkerGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSExposedStarcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedStar.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSExposedToWorkerAndWindowcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSPaintWorkletGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSServiceWorkerGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSSharedWorkerGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestCEReactionscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactions.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestCEReactionsStringifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestCallTracercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCallTracer.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestClassWithJSBuiltinConstructorcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestConditionalIncludescpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionalIncludes.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestConditionallyReadWritecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDOMJITcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDOMJIT.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSON.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONFilteredByExposedcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONIndirectInheritancecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONInheritcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONInheritFinalcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDelegateToSharedSyntheticAttributecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestDomainSecuritycpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDomainSecurity.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestEnabledBySettingcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledBySetting.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestEnabledForContextcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledForContext.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestEventConstructorcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventConstructor.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestEventTargetcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventTarget.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestExceptioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestException.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestGenerateAddOpaqueRootcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestGenerateIsReachablecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestGlobalObjectcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGlobalObject.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterNoIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterThrowingExceptioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterWithIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestInterfacecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterface.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestInterfaceLeadingUnderscorecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestIterablecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIterable.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestJSBuiltinConstructorcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestLegacyFactoryFunctioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestLegacyNoInterfaceObjectcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestLegacyOverrideBuiltInscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestMapLikecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLike.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestMapLikeWithOverriddenOperationscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterNoIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterThrowingExceptioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterWithIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterNoIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterThrowingExceptioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterWithIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterWithIndexedGettercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterCallWithcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterNoIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterWithIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterNoIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterThrowingExceptioncpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIdentifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIndexedGettercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIndexedGetterAndSettercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyOverrideBuiltInscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyUnforgeablePropertiescpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltInscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNamespaceObjectcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamespaceObject.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestNodecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNode.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestObjcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestObj.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestOperationConditionalcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOperationConditional.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestOverloadedConstructorscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestOverloadedConstructorsWithSequencecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestPluginInterfacecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPluginInterface.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestPromiseRejectionEventcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestReadOnlyMapLikecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestReadOnlySetLikecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestReportExtraMemoryCostcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestSerializedScriptValueInterfacecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestSetLikecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLike.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestSetLikeWithOverriddenOperationscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifiercpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifier.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierAnonymousOperationcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierNamedOperationcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierOperationImplementedAscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierOperationNamedToStringcpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierReadOnlyAttributecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestStringifierReadWriteAttributecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSTestTypedefscpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSTestTypedefs.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSWorkerGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkerGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebindingsscriptstestJSJSWorkletGlobalScopecpp">trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkletGlobalScope.cpp</a></li>
<li><a href="#trunkSourceWebCorebridgeobjcobjc_runtimemm">trunk/Source/WebCore/bridge/objc/objc_runtime.mm</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="trunkSourceJavaScriptCoreChangeLog"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/ChangeLog (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/ChangeLog    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/ChangeLog       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,64 @@
</span><span class="cx"> 2021-11-18  Mark Lam  <mark.lam@apple.com>
</span><span class="cx"> 
</span><ins>+        SubSpace constructors should take a const HeapCellType& instead of a HeapCellType*.
+        https://bugs.webkit.org/show_bug.cgi?id=233341
+        rdar://85573277
+
+        Reviewed by Yusuke Suzuki.
+
+        This helps document that HeapCellTypes are immutable once they are instantiated,
+        and that SubSpaces won't be modifying them.
+
+        Also remove the const on CellAttributes return values since it is not needed nor
+        meaningful.
+
+        * heap/BlockDirectory.h:
+        (JSC::BlockDirectory::attributes const):
+        * heap/CompleteSubspace.cpp:
+        (JSC::CompleteSubspace::CompleteSubspace):
+        * heap/CompleteSubspace.h:
+        * heap/HeapCellType.cpp:
+        (JSC::HeapCellType::finishSweep const):
+        (JSC::HeapCellType::destroy const):
+        (JSC::HeapCellType::finishSweep): Deleted.
+        (JSC::HeapCellType::destroy): Deleted.
+        * heap/HeapCellType.h:
+        (JSC::HeapCellType::attributes const):
+        * heap/IsoHeapCellType.cpp:
+        (JSC::IsoHeapCellType::finishSweep const):
+        (JSC::IsoHeapCellType::destroy const):
+        (JSC::IsoHeapCellType::finishSweep): Deleted.
+        (JSC::IsoHeapCellType::destroy): Deleted.
+        * heap/IsoHeapCellType.h:
+        * heap/IsoInlinedHeapCellType.h:
+        * heap/IsoSubspace.cpp:
+        (JSC::IsoSubspace::IsoSubspace):
+        * heap/IsoSubspace.h:
+        * heap/IsoSubspacePerVM.cpp:
+        (JSC::IsoSubspacePerVM::forVM):
+        * heap/IsoSubspacePerVM.h:
+        * heap/MarkedBlock.h:
+        (JSC::MarkedBlock::Handle::attributes const):
+        (JSC::MarkedBlock::attributes const):
+        * heap/PreciseAllocation.h:
+        (JSC::PreciseAllocation::attributes const):
+        * heap/Subspace.cpp:
+        (JSC::Subspace::initialize):
+        * heap/Subspace.h:
+        (JSC::Subspace::heapCellType const):
+        * heap/SubspaceInlines.h:
+        (JSC::Subspace::attributes const):
+        * runtime/JSDestructibleObjectHeapCellType.cpp:
+        (JSC::JSDestructibleObjectHeapCellType::finishSweep const):
+        (JSC::JSDestructibleObjectHeapCellType::destroy const):
+        (JSC::JSDestructibleObjectHeapCellType::finishSweep): Deleted.
+        (JSC::JSDestructibleObjectHeapCellType::destroy): Deleted.
+        * runtime/JSDestructibleObjectHeapCellType.h:
+        * runtime/VM.cpp:
+        (JSC::VM::VM):
+
+2021-11-18  Mark Lam  <mark.lam@apple.com>
+
</ins><span class="cx">         Rename PropertyMapHashTable.h to PropertyTable.h to match the class.
</span><span class="cx">         https://bugs.webkit.org/show_bug.cgi?id=233333
</span><span class="cx">         rdar://85565760
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapBlockDirectoryh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/BlockDirectory.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/BlockDirectory.h        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/BlockDirectory.h   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -74,7 +74,7 @@
</span><span class="cx">     void shrink();
</span><span class="cx">     void assertNoUnswept();
</span><span class="cx">     size_t cellSize() const { return m_cellSize; }
</span><del>-    const CellAttributes attributes() const { return m_attributes; }
</del><ins>+    CellAttributes attributes() const { return m_attributes; }
</ins><span class="cx">     bool needsDestruction() const { return m_attributes.destruction == NeedsDestruction; }
</span><span class="cx">     DestructionMode destruction() const { return m_attributes.destruction; }
</span><span class="cx">     HeapCell::Kind cellKind() const { return m_attributes.cellKind; }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapCompleteSubspacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/CompleteSubspace.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/CompleteSubspace.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/CompleteSubspace.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -35,7 +35,7 @@
</span><span class="cx"> 
</span><span class="cx"> namespace JSC {
</span><span class="cx"> 
</span><del>-CompleteSubspace::CompleteSubspace(CString name, Heap& heap, HeapCellType* heapCellType, AlignedMemoryAllocator* alignedMemoryAllocator)
</del><ins>+CompleteSubspace::CompleteSubspace(CString name, Heap& heap, const HeapCellType& heapCellType, AlignedMemoryAllocator* alignedMemoryAllocator)
</ins><span class="cx">     : Subspace(name, heap)
</span><span class="cx"> {
</span><span class="cx">     initialize(heapCellType, alignedMemoryAllocator);
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapCompleteSubspaceh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/CompleteSubspace.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/CompleteSubspace.h      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/CompleteSubspace.h 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -31,7 +31,7 @@
</span><span class="cx"> 
</span><span class="cx"> class CompleteSubspace final : public Subspace {
</span><span class="cx"> public:
</span><del>-    JS_EXPORT_PRIVATE CompleteSubspace(CString name, Heap&, HeapCellType*, AlignedMemoryAllocator*);
</del><ins>+    JS_EXPORT_PRIVATE CompleteSubspace(CString name, Heap&, const HeapCellType&, AlignedMemoryAllocator*);
</ins><span class="cx">     JS_EXPORT_PRIVATE ~CompleteSubspace() final;
</span><span class="cx"> 
</span><span class="cx">     // In some code paths, we need it to be a compile error to call the virtual version of one of
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapHeapCellTypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/HeapCellType.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/HeapCellType.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/HeapCellType.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -56,12 +56,12 @@
</span><span class="cx"> {
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void HeapCellType::finishSweep(MarkedBlock::Handle& block, FreeList* freeList)
</del><ins>+void HeapCellType::finishSweep(MarkedBlock::Handle& block, FreeList* freeList) const
</ins><span class="cx"> {
</span><span class="cx">     block.finishSweepKnowingHeapCellType(freeList, DefaultDestroyFunc());
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void HeapCellType::destroy(VM& vm, JSCell* cell)
</del><ins>+void HeapCellType::destroy(VM& vm, JSCell* cell) const
</ins><span class="cx"> {
</span><span class="cx">     DefaultDestroyFunc()(vm, cell);
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapHeapCellTypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/HeapCellType.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/HeapCellType.h  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/HeapCellType.h     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -36,14 +36,14 @@
</span><span class="cx">     JS_EXPORT_PRIVATE HeapCellType(CellAttributes);
</span><span class="cx">     JS_EXPORT_PRIVATE virtual ~HeapCellType();
</span><span class="cx"> 
</span><del>-    const CellAttributes attributes() const { return m_attributes; }
</del><ins>+    CellAttributes attributes() const { return m_attributes; }
</ins><span class="cx"> 
</span><span class="cx">     // The purpose of overriding this is to specialize the sweep for your destructors. This won't
</span><span class="cx">     // be called for no-destructor blocks. This must call MarkedBlock::finishSweepKnowingSubspace.
</span><del>-    virtual void finishSweep(MarkedBlock::Handle&, FreeList*);
</del><ins>+    virtual void finishSweep(MarkedBlock::Handle&, FreeList*) const;
</ins><span class="cx"> 
</span><span class="cx">     // These get called for large objects.
</span><del>-    virtual void destroy(VM&, JSCell*);
</del><ins>+    virtual void destroy(VM&, JSCell*) const;
</ins><span class="cx"> 
</span><span class="cx"> private:
</span><span class="cx">     CellAttributes m_attributes;
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoHeapCellTypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoHeapCellType.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoHeapCellType.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoHeapCellType.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2019 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2019-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -39,12 +39,12 @@
</span><span class="cx"> 
</span><span class="cx"> IsoHeapCellType::~IsoHeapCellType() = default;
</span><span class="cx"> 
</span><del>-void IsoHeapCellType::finishSweep(MarkedBlock::Handle& handle, FreeList* freeList)
</del><ins>+void IsoHeapCellType::finishSweep(MarkedBlock::Handle& handle, FreeList* freeList) const
</ins><span class="cx"> {
</span><span class="cx">     handle.finishSweepKnowingHeapCellType(freeList, *this);
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void IsoHeapCellType::destroy(VM&, JSCell* cell)
</del><ins>+void IsoHeapCellType::destroy(VM&, JSCell* cell) const
</ins><span class="cx"> {
</span><span class="cx">     m_destroy(cell);
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoHeapCellTypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoHeapCellType.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoHeapCellType.h       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoHeapCellType.h  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2019-2020 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2019-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -26,7 +26,6 @@
</span><span class="cx"> #pragma once
</span><span class="cx"> 
</span><span class="cx"> #include "HeapCellType.h"
</span><del>-#include "MarkedBlockInlines.h"
</del><span class="cx"> 
</span><span class="cx"> namespace JSC {
</span><span class="cx"> 
</span><span class="lines">@@ -44,8 +43,8 @@
</span><span class="cx">         return makeUnique<IsoHeapCellType>(CellType::needsDestruction ? NeedsDestruction : DoesNotNeedDestruction, &CellType::destroy);
</span><span class="cx">     }
</span><span class="cx"> 
</span><del>-    JS_EXPORT_PRIVATE void finishSweep(MarkedBlock::Handle&, FreeList*) final;
-    JS_EXPORT_PRIVATE void destroy(VM&, JSCell*) final;
</del><ins>+    JS_EXPORT_PRIVATE void finishSweep(MarkedBlock::Handle&, FreeList*) const final;
+    JS_EXPORT_PRIVATE void destroy(VM&, JSCell*) const final;
</ins><span class="cx"> 
</span><span class="cx">     ALWAYS_INLINE void operator()(VM&, JSCell* cell) const
</span><span class="cx">     {
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoInlinedHeapCellTypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoInlinedHeapCellType.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoInlinedHeapCellType.h        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoInlinedHeapCellType.h   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2019-2020 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2019-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -26,7 +26,6 @@
</span><span class="cx"> #pragma once
</span><span class="cx"> 
</span><span class="cx"> #include "HeapCellType.h"
</span><del>-#include "MarkedBlockInlines.h"
</del><span class="cx"> 
</span><span class="cx"> namespace JSC {
</span><span class="cx"> 
</span><span class="lines">@@ -45,12 +44,12 @@
</span><span class="cx">         }
</span><span class="cx">     };
</span><span class="cx"> 
</span><del>-    void finishSweep(MarkedBlock::Handle& handle, FreeList* freeList) final
</del><ins>+    void finishSweep(MarkedBlock::Handle& handle, FreeList* freeList) const final
</ins><span class="cx">     {
</span><span class="cx">         handle.finishSweepKnowingHeapCellType(freeList, DestroyFunc());
</span><span class="cx">     }
</span><span class="cx"> 
</span><del>-    void destroy(VM&, JSCell* cell) final
</del><ins>+    void destroy(VM&, JSCell* cell) const final
</ins><span class="cx">     {
</span><span class="cx">         CellType::destroy(cell);
</span><span class="cx">     }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoSubspacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoSubspace.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoSubspace.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoSubspace.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -33,7 +33,7 @@
</span><span class="cx"> 
</span><span class="cx"> namespace JSC {
</span><span class="cx"> 
</span><del>-IsoSubspace::IsoSubspace(CString name, Heap& heap, HeapCellType* heapCellType, size_t size, uint8_t numberOfLowerTierCells)
</del><ins>+IsoSubspace::IsoSubspace(CString name, Heap& heap, const HeapCellType& heapCellType, size_t size, uint8_t numberOfLowerTierCells)
</ins><span class="cx">     : Subspace(name, heap)
</span><span class="cx">     , m_directory(WTF::roundUpToMultipleOf<MarkedBlock::atomSize>(size))
</span><span class="cx">     , m_localAllocator(&m_directory)
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoSubspaceh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoSubspace.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoSubspace.h   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoSubspace.h      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -37,7 +37,7 @@
</span><span class="cx"> 
</span><span class="cx"> class IsoSubspace : public Subspace {
</span><span class="cx"> public:
</span><del>-    JS_EXPORT_PRIVATE IsoSubspace(CString name, Heap&, HeapCellType*, size_t size, uint8_t numberOfLowerTierCells);
</del><ins>+    JS_EXPORT_PRIVATE IsoSubspace(CString name, Heap&, const HeapCellType&, size_t, uint8_t numberOfLowerTierCells);
</ins><span class="cx">     JS_EXPORT_PRIVATE ~IsoSubspace() override;
</span><span class="cx"> 
</span><span class="cx">     size_t cellSize() { return m_directory.cellSize(); }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoSubspacePerVMcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2018-2019 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2018-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -33,7 +33,7 @@
</span><span class="cx"> 
</span><span class="cx"> class IsoSubspacePerVM::AutoremovingIsoSubspace final : public IsoSubspace {
</span><span class="cx"> public:
</span><del>-    AutoremovingIsoSubspace(IsoSubspacePerVM& perVM, CString name, Heap& heap, HeapCellType* heapCellType, size_t size)
</del><ins>+    AutoremovingIsoSubspace(IsoSubspacePerVM& perVM, CString name, Heap& heap, const HeapCellType& heapCellType, size_t size)
</ins><span class="cx">         : IsoSubspace(name, heap, heapCellType, size, /* numberOfLowerTierCells */ 0)
</span><span class="cx">         , m_perVM(perVM)
</span><span class="cx">     {
</span><span class="lines">@@ -65,7 +65,7 @@
</span><span class="cx">     auto result = m_subspacePerVM.add(&vm, nullptr);
</span><span class="cx">     if (result.isNewEntry) {
</span><span class="cx">         SubspaceParameters params = m_subspaceParameters(vm);
</span><del>-        result.iterator->value = new AutoremovingIsoSubspace(*this, params.name, vm.heap, params.heapCellType, params.size);
</del><ins>+        result.iterator->value = new AutoremovingIsoSubspace(*this, params.name, vm.heap, *params.heapCellType, params.size);
</ins><span class="cx">     }
</span><span class="cx">     return *result.iterator->value;
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapIsoSubspacePerVMh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.h      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/IsoSubspacePerVM.h 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2018-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -41,15 +41,15 @@
</span><span class="cx">     struct SubspaceParameters {
</span><span class="cx">         SubspaceParameters() { }
</span><span class="cx">         
</span><del>-        SubspaceParameters(CString name, HeapCellType* heapCellType, size_t size)
</del><ins>+        SubspaceParameters(CString name, const HeapCellType& heapCellType, size_t size)
</ins><span class="cx">             : name(WTFMove(name))
</span><del>-            , heapCellType(heapCellType)
</del><ins>+            , heapCellType(&heapCellType)
</ins><span class="cx">             , size(size)
</span><span class="cx">         {
</span><span class="cx">         }
</span><span class="cx">         
</span><span class="cx">         CString name;
</span><del>-        HeapCellType* heapCellType { nullptr };
</del><ins>+        const HeapCellType* heapCellType { nullptr };
</ins><span class="cx">         size_t size { 0 };
</span><span class="cx">     };
</span><span class="cx">     
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapMarkedBlockh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/MarkedBlock.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/MarkedBlock.h   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/MarkedBlock.h      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -160,8 +160,8 @@
</span><span class="cx">             
</span><span class="cx">         size_t cellSize();
</span><span class="cx">         inline unsigned cellsPerBlock();
</span><del>-        
-        const CellAttributes attributes() const;
</del><ins>+
+        CellAttributes attributes() const;
</ins><span class="cx">         DestructionMode destruction() const;
</span><span class="cx">         bool needsDestruction() const;
</span><span class="cx">         HeapCell::Kind cellKind() const;
</span><span class="lines">@@ -347,8 +347,8 @@
</span><span class="cx">     void resetAllocated();
</span><span class="cx">         
</span><span class="cx">     size_t cellSize();
</span><del>-    const CellAttributes attributes() const;
-    
</del><ins>+    CellAttributes attributes() const;
+
</ins><span class="cx">     bool hasAnyMarked() const;
</span><span class="cx">     void noteMarked();
</span><span class="cx"> #if ASSERT_ENABLED
</span><span class="lines">@@ -511,12 +511,12 @@
</span><span class="cx">     return handle().cellSize();
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-inline const CellAttributes MarkedBlock::Handle::attributes() const
</del><ins>+inline CellAttributes MarkedBlock::Handle::attributes() const
</ins><span class="cx"> {
</span><span class="cx">     return m_attributes;
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-inline const CellAttributes MarkedBlock::attributes() const
</del><ins>+inline CellAttributes MarkedBlock::attributes() const
</ins><span class="cx"> {
</span><span class="cx">     return handle().attributes();
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapPreciseAllocationh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/PreciseAllocation.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/PreciseAllocation.h     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/PreciseAllocation.h        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -120,9 +120,9 @@
</span><span class="cx">     {
</span><span class="cx">         return aboveLowerBound(rawPtr) && belowUpperBound(rawPtr);
</span><span class="cx">     }
</span><del>-    
-    const CellAttributes attributes() const { return m_attributes; }
-    
</del><ins>+
+    CellAttributes attributes() const { return m_attributes; }
+
</ins><span class="cx">     Dependency aboutToMark(HeapVersion) { return Dependency(); }
</span><span class="cx">     
</span><span class="cx">     ALWAYS_INLINE bool testAndSetMarked()
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapSubspacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/Subspace.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/Subspace.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/Subspace.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -40,9 +40,9 @@
</span><span class="cx"> {
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void Subspace::initialize(HeapCellType* heapCellType, AlignedMemoryAllocator* alignedMemoryAllocator)
</del><ins>+void Subspace::initialize(const HeapCellType& heapCellType, AlignedMemoryAllocator* alignedMemoryAllocator)
</ins><span class="cx"> {
</span><del>-    m_heapCellType = heapCellType;
</del><ins>+    m_heapCellType = &heapCellType;
</ins><span class="cx">     m_alignedMemoryAllocator = alignedMemoryAllocator;
</span><span class="cx">     m_directoryForEmptyAllocation = m_alignedMemoryAllocator->firstDirectory();
</span><span class="cx"> 
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapSubspaceh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/Subspace.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/Subspace.h      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/Subspace.h 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -44,14 +44,13 @@
</span><span class="cx">     WTF_MAKE_NONCOPYABLE(Subspace);
</span><span class="cx">     WTF_MAKE_FAST_ALLOCATED;
</span><span class="cx"> public:
</span><del>-    JS_EXPORT_PRIVATE Subspace(CString name, Heap&);
</del><span class="cx">     JS_EXPORT_PRIVATE virtual ~Subspace();
</span><span class="cx"> 
</span><span class="cx">     const char* name() const { return m_name.data(); }
</span><span class="cx">     MarkedSpace& space() const { return m_space; }
</span><del>-    
-    const CellAttributes attributes() const;
-    HeapCellType* heapCellType() const { return m_heapCellType; }
</del><ins>+
+    CellAttributes attributes() const;
+    const HeapCellType* heapCellType() const { return m_heapCellType; }
</ins><span class="cx">     AlignedMemoryAllocator* alignedMemoryAllocator() const { return m_alignedMemoryAllocator; }
</span><span class="cx">     
</span><span class="cx">     void finishSweep(MarkedBlock::Handle&, FreeList*);
</span><span class="lines">@@ -104,11 +103,13 @@
</span><span class="cx">     bool isIsoSubspace() const { return m_isIsoSubspace; }
</span><span class="cx"> 
</span><span class="cx"> protected:
</span><del>-    void initialize(HeapCellType*, AlignedMemoryAllocator*);
</del><ins>+    Subspace(CString name, Heap&);
+
+    void initialize(const HeapCellType&, AlignedMemoryAllocator*);
</ins><span class="cx">     
</span><span class="cx">     MarkedSpace& m_space;
</span><span class="cx">     
</span><del>-    HeapCellType* m_heapCellType { nullptr };
</del><ins>+    const HeapCellType* m_heapCellType { nullptr };
</ins><span class="cx">     AlignedMemoryAllocator* m_alignedMemoryAllocator { nullptr };
</span><span class="cx">     
</span><span class="cx">     BlockDirectory* m_firstDirectory { nullptr };
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreheapSubspaceInlinesh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/heap/SubspaceInlines.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/heap/SubspaceInlines.h       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/heap/SubspaceInlines.h  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -152,7 +152,7 @@
</span><span class="cx">         });
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-inline const CellAttributes Subspace::attributes() const
</del><ins>+inline CellAttributes Subspace::attributes() const
</ins><span class="cx"> {
</span><span class="cx">     return m_heapCellType->attributes();
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeJSDestructibleObjectHeapCellTypecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2018 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -48,12 +48,12 @@
</span><span class="cx"> {
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void JSDestructibleObjectHeapCellType::finishSweep(MarkedBlock::Handle& handle, FreeList* freeList)
</del><ins>+void JSDestructibleObjectHeapCellType::finishSweep(MarkedBlock::Handle& handle, FreeList* freeList) const
</ins><span class="cx"> {
</span><span class="cx">     handle.finishSweepKnowingHeapCellType(freeList, JSDestructibleObjectDestroyFunc());
</span><span class="cx"> }
</span><span class="cx"> 
</span><del>-void JSDestructibleObjectHeapCellType::destroy(VM& vm, JSCell* cell)
</del><ins>+void JSDestructibleObjectHeapCellType::destroy(VM& vm, JSCell* cell) const
</ins><span class="cx"> {
</span><span class="cx">     JSDestructibleObjectDestroyFunc()(vm, cell);
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeJSDestructibleObjectHeapCellTypeh"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.h (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.h   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/runtime/JSDestructibleObjectHeapCellType.h      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -34,8 +34,8 @@
</span><span class="cx">     JS_EXPORT_PRIVATE JSDestructibleObjectHeapCellType();
</span><span class="cx">     JS_EXPORT_PRIVATE ~JSDestructibleObjectHeapCellType() final;
</span><span class="cx">     
</span><del>-    void finishSweep(MarkedBlock::Handle&, FreeList*) final;
-    void destroy(VM&, JSCell*) final;
</del><ins>+    void finishSweep(MarkedBlock::Handle&, FreeList*) const final;
+    void destroy(VM&, JSCell*) const final;
</ins><span class="cx"> };
</span><span class="cx"> 
</span><span class="cx"> } // namespace JSC
</span></span></pre></div>
<a id="trunkSourceJavaScriptCoreruntimeVMcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/JavaScriptCore/runtime/VM.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/JavaScriptCore/runtime/VM.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/JavaScriptCore/runtime/VM.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -139,6 +139,7 @@
</span><span class="cx"> #include "JSWithScope.h"
</span><span class="cx"> #include "LLIntData.h"
</span><span class="cx"> #include "LLIntExceptions.h"
</span><ins>+#include "MarkedBlockInlines.h"
</ins><span class="cx"> #include "MinimumReservedZoneSize.h"
</span><span class="cx"> #include "ModuleProgramCodeBlock.h"
</span><span class="cx"> #include "ModuleProgramExecutable.h"
</span><span class="lines">@@ -349,50 +350,50 @@
</span><span class="cx">     , webAssemblyTableHeapCellType(IsoHeapCellType::create<JSWebAssemblyTable>())
</span><span class="cx">     , webAssemblyTagHeapCellType(IsoHeapCellType::create<JSWebAssemblyTag>())
</span><span class="cx"> #endif
</span><del>-    , primitiveGigacageAuxiliarySpace("Primitive Gigacage Auxiliary", heap, auxiliaryHeapCellType.get(), primitiveGigacageAllocator.get()) // Hash:0x3e7cd762
-    , jsValueGigacageAuxiliarySpace("JSValue Gigacage Auxiliary", heap, auxiliaryHeapCellType.get(), jsValueGigacageAllocator.get()) // Hash:0x241e946
-    , immutableButterflyJSValueGigacageAuxiliarySpace("ImmutableButterfly Gigacage JSCellWithIndexingHeader", heap, immutableButterflyHeapCellType.get(), jsValueGigacageAllocator.get()) // Hash:0x7a945300
-    , cellSpace("JSCell", heap, cellHeapCellType.get(), fastMallocAllocator.get()) // Hash:0xadfb5a79
-    , variableSizedCellSpace("Variable Sized JSCell", heap, cellHeapCellType.get(), fastMallocAllocator.get()) // Hash:0xbcd769cc
-    , destructibleObjectSpace("JSDestructibleObject", heap, destructibleObjectHeapCellType.get(), fastMallocAllocator.get()) // Hash:0x4f5ed7a9
-    , arraySpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSArray)
-    , bigIntSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSBigInt)
-    , calleeSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSCallee)
-    , clonedArgumentsSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), ClonedArguments)
-    , customGetterSetterSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), CustomGetterSetter)
-    , dateInstanceSpace ISO_SUBSPACE_INIT(heap, dateInstanceHeapCellType.get(), DateInstance)
-    , domAttributeGetterSetterSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), DOMAttributeGetterSetter)
-    , exceptionSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), Exception)
-    , executableToCodeBlockEdgeSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), ExecutableToCodeBlockEdge) // Hash:0x7b730b20
-    , functionSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSFunction) // Hash:0x800fca72
-    , getterSetterSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), GetterSetter)
-    , globalLexicalEnvironmentSpace ISO_SUBSPACE_INIT(heap, globalLexicalEnvironmentHeapCellType.get(), JSGlobalLexicalEnvironment)
-    , internalFunctionSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), InternalFunction) // Hash:0xf845c464
-    , jsProxySpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSProxy)
-    , nativeExecutableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), NativeExecutable) // Hash:0x67567f95
-    , numberObjectSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), NumberObject)
-    , plainObjectSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSNonFinalObject) // Mainly used for prototypes.
-    , promiseSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSPromise)
-    , propertyNameEnumeratorSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), JSPropertyNameEnumerator)
-    , propertyTableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), PropertyTable) // Hash:0xc6bc9f12
-    , regExpSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), RegExp)
-    , regExpObjectSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), RegExpObject)
-    , ropeStringSpace ISO_SUBSPACE_INIT(heap, stringHeapCellType.get(), JSRopeString)
-    , scopedArgumentsSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), ScopedArguments)
-    , sparseArrayValueMapSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), SparseArrayValueMap)
-    , stringSpace ISO_SUBSPACE_INIT(heap, stringHeapCellType.get(), JSString) // Hash:0x90cf758f
-    , stringObjectSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), StringObject)
-    , structureChainSpace ISO_SUBSPACE_INIT(heap, cellHeapCellType.get(), StructureChain)
-    , structureRareDataSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), StructureRareData) // Hash:0xaca4e62d
-    , structureSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), Structure) // Hash:0x1f1bcdca
-    , brandedStructureSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), BrandedStructure)
-    , symbolTableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), SymbolTable) // Hash:0xc5215afd
</del><ins>+    , primitiveGigacageAuxiliarySpace("Primitive Gigacage Auxiliary", heap, *auxiliaryHeapCellType, primitiveGigacageAllocator.get()) // Hash:0x3e7cd762
+    , jsValueGigacageAuxiliarySpace("JSValue Gigacage Auxiliary", heap, *auxiliaryHeapCellType, jsValueGigacageAllocator.get()) // Hash:0x241e946
+    , immutableButterflyJSValueGigacageAuxiliarySpace("ImmutableButterfly Gigacage JSCellWithIndexingHeader", heap, *immutableButterflyHeapCellType, jsValueGigacageAllocator.get()) // Hash:0x7a945300
+    , cellSpace("JSCell", heap, *cellHeapCellType, fastMallocAllocator.get()) // Hash:0xadfb5a79
+    , variableSizedCellSpace("Variable Sized JSCell", heap, *cellHeapCellType, fastMallocAllocator.get()) // Hash:0xbcd769cc
+    , destructibleObjectSpace("JSDestructibleObject", heap, *destructibleObjectHeapCellType, fastMallocAllocator.get()) // Hash:0x4f5ed7a9
+    , arraySpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSArray)
+    , bigIntSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSBigInt)
+    , calleeSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSCallee)
+    , clonedArgumentsSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, ClonedArguments)
+    , customGetterSetterSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, CustomGetterSetter)
+    , dateInstanceSpace ISO_SUBSPACE_INIT(heap, *dateInstanceHeapCellType, DateInstance)
+    , domAttributeGetterSetterSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, DOMAttributeGetterSetter)
+    , exceptionSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, Exception)
+    , executableToCodeBlockEdgeSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, ExecutableToCodeBlockEdge) // Hash:0x7b730b20
+    , functionSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSFunction) // Hash:0x800fca72
+    , getterSetterSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, GetterSetter)
+    , globalLexicalEnvironmentSpace ISO_SUBSPACE_INIT(heap, *globalLexicalEnvironmentHeapCellType, JSGlobalLexicalEnvironment)
+    , internalFunctionSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, InternalFunction) // Hash:0xf845c464
+    , jsProxySpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSProxy)
+    , nativeExecutableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, NativeExecutable) // Hash:0x67567f95
+    , numberObjectSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, NumberObject)
+    , plainObjectSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSNonFinalObject) // Mainly used for prototypes.
+    , promiseSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSPromise)
+    , propertyNameEnumeratorSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, JSPropertyNameEnumerator)
+    , propertyTableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, PropertyTable) // Hash:0xc6bc9f12
+    , regExpSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, RegExp)
+    , regExpObjectSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, RegExpObject)
+    , ropeStringSpace ISO_SUBSPACE_INIT(heap, *stringHeapCellType, JSRopeString)
+    , scopedArgumentsSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, ScopedArguments)
+    , sparseArrayValueMapSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, SparseArrayValueMap)
+    , stringSpace ISO_SUBSPACE_INIT(heap, *stringHeapCellType, JSString) // Hash:0x90cf758f
+    , stringObjectSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, StringObject)
+    , structureChainSpace ISO_SUBSPACE_INIT(heap, *cellHeapCellType, StructureChain)
+    , structureRareDataSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, StructureRareData) // Hash:0xaca4e62d
+    , structureSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, Structure) // Hash:0x1f1bcdca
+    , brandedStructureSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, BrandedStructure)
+    , symbolTableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, SymbolTable) // Hash:0xc5215afd
</ins><span class="cx">     , executableToCodeBlockEdgesWithConstraints(executableToCodeBlockEdgeSpace)
</span><span class="cx">     , executableToCodeBlockEdgesWithFinalizers(executableToCodeBlockEdgeSpace)
</span><del>-    , codeBlockSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), CodeBlock) // Hash:0x77e66ec9
-    , functionExecutableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), FunctionExecutable) // Hash:0x5d158f3
-    , programExecutableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), ProgramExecutable) // Hash:0x527c77e7
-    , unlinkedFunctionExecutableSpace ISO_SUBSPACE_INIT(heap, destructibleCellHeapCellType.get(), UnlinkedFunctionExecutable) // Hash:0xf6b828d9
</del><ins>+    , codeBlockSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, CodeBlock) // Hash:0x77e66ec9
+    , functionExecutableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, FunctionExecutable) // Hash:0x5d158f3
+    , programExecutableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, ProgramExecutable) // Hash:0x527c77e7
+    , unlinkedFunctionExecutableSpace ISO_SUBSPACE_INIT(heap, *destructibleCellHeapCellType, UnlinkedFunctionExecutable) // Hash:0xf6b828d9
</ins><span class="cx">     , vmType(vmType)
</span><span class="cx">     , clientData(nullptr)
</span><span class="cx">     , topEntryFrame(nullptr)
</span><span class="lines">@@ -1582,107 +1583,107 @@
</span><span class="cx">     }
</span><span class="cx"> 
</span><span class="cx"> 
</span><del>-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiGlobalObjectSpace, apiGlobalObjectHeapCellType.get(), JSAPIGlobalObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiValueWrapperSpace, cellHeapCellType.get(), JSAPIValueWrapper)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(arrayBufferSpace, cellHeapCellType.get(), JSArrayBuffer)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(arrayIteratorSpace, cellHeapCellType.get(), JSArrayIterator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(asyncGeneratorSpace, cellHeapCellType.get(), JSAsyncGenerator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigInt64ArraySpace, cellHeapCellType.get(), JSBigInt64Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigIntObjectSpace, cellHeapCellType.get(), BigIntObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigUint64ArraySpace, cellHeapCellType.get(), JSBigUint64Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(booleanObjectSpace, cellHeapCellType.get(), BooleanObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(boundFunctionSpace, cellHeapCellType.get(), JSBoundFunction) // Hash:0xd7916d41
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackConstructorSpace, callbackConstructorHeapCellType.get(), JSCallbackConstructor)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackGlobalObjectSpace, callbackGlobalObjectHeapCellType.get(), JSCallbackObject<JSGlobalObject>)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackFunctionSpace, cellHeapCellType.get(), JSCallbackFunction) // Hash:0xe7648ebc
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackObjectSpace, callbackObjectHeapCellType.get(), JSCallbackObject<JSNonFinalObject>)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(customGetterFunctionSpace, customGetterFunctionHeapCellType.get(), JSCustomGetterFunction)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(customSetterFunctionSpace, customSetterFunctionHeapCellType.get(), JSCustomSetterFunction)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(dataViewSpace, cellHeapCellType.get(), JSDataView)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(debuggerScopeSpace, cellHeapCellType.get(), DebuggerScope)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(errorInstanceSpace, errorInstanceHeapCellType.get(), ErrorInstance) // Hash:0x3f40d4a
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(float32ArraySpace, cellHeapCellType.get(), JSFloat32Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(float64ArraySpace, cellHeapCellType.get(), JSFloat64Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(functionRareDataSpace, destructibleCellHeapCellType.get(), FunctionRareData)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(generatorSpace, cellHeapCellType.get(), JSGenerator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(globalObjectSpace, globalObjectHeapCellType.get(), JSGlobalObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(injectedScriptHostSpace, injectedScriptHostSpaceHeapCellType.get(), Inspector::JSInjectedScriptHost)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int8ArraySpace, cellHeapCellType.get(), JSInt8Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int16ArraySpace, cellHeapCellType.get(), JSInt16Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int32ArraySpace, cellHeapCellType.get(), JSInt32Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(javaScriptCallFrameSpace, javaScriptCallFrameHeapCellType.get(), Inspector::JSJavaScriptCallFrame)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jsModuleRecordSpace, jsModuleRecordHeapCellType.get(), JSModuleRecord)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapBucketSpace, cellHeapCellType.get(), JSMap::BucketType)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapIteratorSpace, cellHeapCellType.get(), JSMapIterator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapSpace, cellHeapCellType.get(), JSMap)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(moduleNamespaceObjectSpace, moduleNamespaceObjectHeapCellType.get(), JSModuleNamespaceObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(nativeStdFunctionSpace, nativeStdFunctionHeapCellType.get(), JSNativeStdFunction) // Hash:0x70ed61e4
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(proxyObjectSpace, cellHeapCellType.get(), ProxyObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(proxyRevokeSpace, cellHeapCellType.get(), ProxyRevoke) // Hash:0xb506a939
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scopedArgumentsTableSpace, destructibleCellHeapCellType.get(), ScopedArgumentsTable)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scriptFetchParametersSpace, destructibleCellHeapCellType.get(), JSScriptFetchParameters)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scriptFetcherSpace, destructibleCellHeapCellType.get(), JSScriptFetcher)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setBucketSpace, cellHeapCellType.get(), JSSet::BucketType)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setIteratorSpace, cellHeapCellType.get(), JSSetIterator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setSpace, cellHeapCellType.get(), JSSet)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(shadowRealmSpace, cellHeapCellType.get(), ShadowRealmObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(strictEvalActivationSpace, cellHeapCellType.get(), StrictEvalActivation)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(stringIteratorSpace, cellHeapCellType.get(), JSStringIterator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(sourceCodeSpace, destructibleCellHeapCellType.get(), JSSourceCode)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(symbolSpace, destructibleCellHeapCellType.get(), Symbol)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(symbolObjectSpace, cellHeapCellType.get(), SymbolObject)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(templateObjectDescriptorSpace, destructibleCellHeapCellType.get(), JSTemplateObjectDescriptor)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalCalendarSpace, cellHeapCellType.get(), TemporalCalendar)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalDurationSpace, cellHeapCellType.get(), TemporalDuration)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalInstantSpace, cellHeapCellType.get(), TemporalInstant)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalPlainTimeSpace, cellHeapCellType.get(), TemporalPlainTime)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalTimeZoneSpace, cellHeapCellType.get(), TemporalTimeZone)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint8ArraySpace, cellHeapCellType.get(), JSUint8Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint8ClampedArraySpace, cellHeapCellType.get(), JSUint8ClampedArray)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint16ArraySpace, cellHeapCellType.get(), JSUint16Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint32ArraySpace, cellHeapCellType.get(), JSUint32Array)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedEvalCodeBlockSpace, destructibleCellHeapCellType.get(), UnlinkedEvalCodeBlock)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedFunctionCodeBlockSpace, destructibleCellHeapCellType.get(), UnlinkedFunctionCodeBlock)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedModuleProgramCodeBlockSpace, destructibleCellHeapCellType.get(), UnlinkedModuleProgramCodeBlock)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedProgramCodeBlockSpace, destructibleCellHeapCellType.get(), UnlinkedProgramCodeBlock)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakMapSpace, weakMapHeapCellType.get(), JSWeakMap) // Hash:0x662b12a3
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakSetSpace, weakSetHeapCellType.get(), JSWeakSet) // Hash:0x4c781b30
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakObjectRefSpace, cellHeapCellType.get(), JSWeakObjectRef) // Hash:0x8ec68f1f
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(withScopeSpace, cellHeapCellType.get(), JSWithScope)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(finalizationRegistrySpace, finalizationRegistryCellType.get(), JSFinalizationRegistry)
</del><ins>+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiGlobalObjectSpace, *apiGlobalObjectHeapCellType, JSAPIGlobalObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiValueWrapperSpace, *cellHeapCellType, JSAPIValueWrapper)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(arrayBufferSpace, *cellHeapCellType, JSArrayBuffer)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(arrayIteratorSpace, *cellHeapCellType, JSArrayIterator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(asyncGeneratorSpace, *cellHeapCellType, JSAsyncGenerator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigInt64ArraySpace, *cellHeapCellType, JSBigInt64Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigIntObjectSpace, *cellHeapCellType, BigIntObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(bigUint64ArraySpace, *cellHeapCellType, JSBigUint64Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(booleanObjectSpace, *cellHeapCellType, BooleanObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(boundFunctionSpace, *cellHeapCellType, JSBoundFunction) // Hash:0xd7916d41
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackConstructorSpace, *callbackConstructorHeapCellType, JSCallbackConstructor)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackGlobalObjectSpace, *callbackGlobalObjectHeapCellType, JSCallbackObject<JSGlobalObject>)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackFunctionSpace, *cellHeapCellType, JSCallbackFunction) // Hash:0xe7648ebc
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackObjectSpace, *callbackObjectHeapCellType, JSCallbackObject<JSNonFinalObject>)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(customGetterFunctionSpace, *customGetterFunctionHeapCellType, JSCustomGetterFunction)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(customSetterFunctionSpace, *customSetterFunctionHeapCellType, JSCustomSetterFunction)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(dataViewSpace, *cellHeapCellType, JSDataView)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(debuggerScopeSpace, *cellHeapCellType, DebuggerScope)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(errorInstanceSpace, *errorInstanceHeapCellType, ErrorInstance) // Hash:0x3f40d4a
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(float32ArraySpace, *cellHeapCellType, JSFloat32Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(float64ArraySpace, *cellHeapCellType, JSFloat64Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(functionRareDataSpace, *destructibleCellHeapCellType, FunctionRareData)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(generatorSpace, *cellHeapCellType, JSGenerator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(globalObjectSpace, *globalObjectHeapCellType, JSGlobalObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(injectedScriptHostSpace, *injectedScriptHostSpaceHeapCellType, Inspector::JSInjectedScriptHost)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int8ArraySpace, *cellHeapCellType, JSInt8Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int16ArraySpace, *cellHeapCellType, JSInt16Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(int32ArraySpace, *cellHeapCellType, JSInt32Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(javaScriptCallFrameSpace, *javaScriptCallFrameHeapCellType, Inspector::JSJavaScriptCallFrame)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jsModuleRecordSpace, *jsModuleRecordHeapCellType, JSModuleRecord)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapBucketSpace, *cellHeapCellType, JSMap::BucketType)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapIteratorSpace, *cellHeapCellType, JSMapIterator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(mapSpace, *cellHeapCellType, JSMap)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(moduleNamespaceObjectSpace, *moduleNamespaceObjectHeapCellType, JSModuleNamespaceObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(nativeStdFunctionSpace, *nativeStdFunctionHeapCellType, JSNativeStdFunction) // Hash:0x70ed61e4
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(proxyObjectSpace, *cellHeapCellType, ProxyObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(proxyRevokeSpace, *cellHeapCellType, ProxyRevoke) // Hash:0xb506a939
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scopedArgumentsTableSpace, *destructibleCellHeapCellType, ScopedArgumentsTable)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scriptFetchParametersSpace, *destructibleCellHeapCellType, JSScriptFetchParameters)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(scriptFetcherSpace, *destructibleCellHeapCellType, JSScriptFetcher)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setBucketSpace, *cellHeapCellType, JSSet::BucketType)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setIteratorSpace, *cellHeapCellType, JSSetIterator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(setSpace, *cellHeapCellType, JSSet)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(shadowRealmSpace, *cellHeapCellType, ShadowRealmObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(strictEvalActivationSpace, *cellHeapCellType, StrictEvalActivation)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(stringIteratorSpace, *cellHeapCellType, JSStringIterator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(sourceCodeSpace, *destructibleCellHeapCellType, JSSourceCode)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(symbolSpace, *destructibleCellHeapCellType, Symbol)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(symbolObjectSpace, *cellHeapCellType, SymbolObject)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(templateObjectDescriptorSpace, *destructibleCellHeapCellType, JSTemplateObjectDescriptor)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalCalendarSpace, *cellHeapCellType, TemporalCalendar)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalDurationSpace, *cellHeapCellType, TemporalDuration)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalInstantSpace, *cellHeapCellType, TemporalInstant)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalPlainTimeSpace, *cellHeapCellType, TemporalPlainTime)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(temporalTimeZoneSpace, *cellHeapCellType, TemporalTimeZone)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint8ArraySpace, *cellHeapCellType, JSUint8Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint8ClampedArraySpace, *cellHeapCellType, JSUint8ClampedArray)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint16ArraySpace, *cellHeapCellType, JSUint16Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(uint32ArraySpace, *cellHeapCellType, JSUint32Array)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedEvalCodeBlockSpace, *destructibleCellHeapCellType, UnlinkedEvalCodeBlock)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedFunctionCodeBlockSpace, *destructibleCellHeapCellType, UnlinkedFunctionCodeBlock)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedModuleProgramCodeBlockSpace, *destructibleCellHeapCellType, UnlinkedModuleProgramCodeBlock)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(unlinkedProgramCodeBlockSpace, *destructibleCellHeapCellType, UnlinkedProgramCodeBlock)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakMapSpace, *weakMapHeapCellType, JSWeakMap) // Hash:0x662b12a3
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakSetSpace, *weakSetHeapCellType, JSWeakSet) // Hash:0x4c781b30
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(weakObjectRefSpace, *cellHeapCellType, JSWeakObjectRef) // Hash:0x8ec68f1f
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(withScopeSpace, *cellHeapCellType, JSWithScope)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(finalizationRegistrySpace, *finalizationRegistryCellType, JSFinalizationRegistry)
</ins><span class="cx"> #if JSC_OBJC_API_ENABLED
</span><del>-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiWrapperObjectSpace, apiWrapperObjectHeapCellType.get(), JSCallbackObject<JSAPIWrapperObject>)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(objCCallbackFunctionSpace, objCCallbackFunctionHeapCellType.get(), ObjCCallbackFunction) // Hash:0x10f610b8
</del><ins>+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiWrapperObjectSpace, *apiWrapperObjectHeapCellType, JSCallbackObject<JSAPIWrapperObject>)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(objCCallbackFunctionSpace, *objCCallbackFunctionHeapCellType, ObjCCallbackFunction) // Hash:0x10f610b8
</ins><span class="cx"> #endif
</span><span class="cx"> #ifdef JSC_GLIB_API_ENABLED
</span><del>-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiWrapperObjectSpace, apiWrapperObjectHeapCellType.get(), JSCallbackObject<JSAPIWrapperObject>)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jscCallbackFunctionSpace, jscCallbackFunctionHeapCellType.get(), JSCCallbackFunction)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackAPIWrapperGlobalObjectSpace, callbackAPIWrapperGlobalObjectHeapCellType.get(), JSCallbackObject<JSAPIWrapperGlobalObject>)
</del><ins>+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(apiWrapperObjectSpace, *apiWrapperObjectHeapCellType, JSCallbackObject<JSAPIWrapperObject>)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jscCallbackFunctionSpace, *jscCallbackFunctionHeapCellType, JSCCallbackFunction)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(callbackAPIWrapperGlobalObjectSpace, *callbackAPIWrapperGlobalObjectHeapCellType, JSCallbackObject<JSAPIWrapperGlobalObject>)
</ins><span class="cx"> #endif
</span><del>-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlCollatorSpace, intlCollatorHeapCellType.get(), IntlCollator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlDateTimeFormatSpace, intlDateTimeFormatHeapCellType.get(), IntlDateTimeFormat)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlDisplayNamesSpace, intlDisplayNamesHeapCellType.get(), IntlDisplayNames)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlListFormatSpace, intlListFormatHeapCellType.get(), IntlListFormat)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlLocaleSpace, intlLocaleHeapCellType.get(), IntlLocale)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlNumberFormatSpace, intlNumberFormatHeapCellType.get(), IntlNumberFormat)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlPluralRulesSpace, intlPluralRulesHeapCellType.get(), IntlPluralRules)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlRelativeTimeFormatSpace, intlRelativeTimeFormatHeapCellType.get(), IntlRelativeTimeFormat)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmentIteratorSpace, intlSegmentIteratorHeapCellType.get(), IntlSegmentIterator)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmenterSpace, intlSegmenterHeapCellType.get(), IntlSegmenter)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmentsSpace, intlSegmentsHeapCellType.get(), IntlSegments)
</del><ins>+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlCollatorSpace, *intlCollatorHeapCellType, IntlCollator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlDateTimeFormatSpace, *intlDateTimeFormatHeapCellType, IntlDateTimeFormat)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlDisplayNamesSpace, *intlDisplayNamesHeapCellType, IntlDisplayNames)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlListFormatSpace, *intlListFormatHeapCellType, IntlListFormat)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlLocaleSpace, *intlLocaleHeapCellType, IntlLocale)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlNumberFormatSpace, *intlNumberFormatHeapCellType, IntlNumberFormat)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlPluralRulesSpace, *intlPluralRulesHeapCellType, IntlPluralRules)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlRelativeTimeFormatSpace, *intlRelativeTimeFormatHeapCellType, IntlRelativeTimeFormat)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmentIteratorSpace, *intlSegmentIteratorHeapCellType, IntlSegmentIterator)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmenterSpace, *intlSegmenterHeapCellType, IntlSegmenter)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(intlSegmentsSpace, *intlSegmentsHeapCellType, IntlSegments)
</ins><span class="cx"> #if ENABLE(WEBASSEMBLY)
</span><del>-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jsToWasmICCalleeSpace, cellHeapCellType.get(), JSToWasmICCallee)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyCodeBlockSpace, webAssemblyCodeBlockHeapCellType.get(), JSWebAssemblyCodeBlock) // Hash:0x9ad995cd
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyExceptionSpace, webAssemblyExceptionHeapCellType.get(), JSWebAssemblyException)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyFunctionSpace, webAssemblyFunctionHeapCellType.get(), WebAssemblyFunction) // Hash:0x8b7c32db
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyGlobalSpace, webAssemblyGlobalHeapCellType.get(), JSWebAssemblyGlobal)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyInstanceSpace, webAssemblyInstanceHeapCellType.get(), JSWebAssemblyInstance)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyMemorySpace, webAssemblyMemoryHeapCellType.get(), JSWebAssemblyMemory)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyModuleSpace, webAssemblyModuleHeapCellType.get(), JSWebAssemblyModule)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyModuleRecordSpace, webAssemblyModuleRecordHeapCellType.get(), WebAssemblyModuleRecord)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyTableSpace, webAssemblyTableHeapCellType.get(), JSWebAssemblyTable)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyTagSpace, webAssemblyTagHeapCellType.get(), JSWebAssemblyTag)
-DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyWrapperFunctionSpace, cellHeapCellType.get(), WebAssemblyWrapperFunction) // Hash:0xd4a5ff01
</del><ins>+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(jsToWasmICCalleeSpace, *cellHeapCellType, JSToWasmICCallee)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyCodeBlockSpace, *webAssemblyCodeBlockHeapCellType, JSWebAssemblyCodeBlock) // Hash:0x9ad995cd
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyExceptionSpace, *webAssemblyExceptionHeapCellType, JSWebAssemblyException)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyFunctionSpace, *webAssemblyFunctionHeapCellType, WebAssemblyFunction) // Hash:0x8b7c32db
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyGlobalSpace, *webAssemblyGlobalHeapCellType, JSWebAssemblyGlobal)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyInstanceSpace, *webAssemblyInstanceHeapCellType, JSWebAssemblyInstance)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyMemorySpace, *webAssemblyMemoryHeapCellType, JSWebAssemblyMemory)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyModuleSpace, *webAssemblyModuleHeapCellType, JSWebAssemblyModule)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyModuleRecordSpace, *webAssemblyModuleRecordHeapCellType, WebAssemblyModuleRecord)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyTableSpace, *webAssemblyTableHeapCellType, JSWebAssemblyTable)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyTagSpace, *webAssemblyTagHeapCellType, JSWebAssemblyTag)
+DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW(webAssemblyWrapperFunctionSpace, *cellHeapCellType, WebAssemblyWrapperFunction) // Hash:0xd4a5ff01
</ins><span class="cx"> #endif
</span><span class="cx"> 
</span><span class="cx"> #undef DYNAMIC_ISO_SUBSPACE_DEFINE_MEMBER_SLOW
</span><span class="lines">@@ -1697,8 +1698,8 @@
</span><span class="cx">         return &m_##name->space; \
</span><span class="cx">     }
</span><span class="cx"> 
</span><del>-DYNAMIC_SPACE_AND_SET_DEFINE_MEMBER_SLOW(evalExecutableSpace, destructibleCellHeapCellType.get(), EvalExecutable) // Hash:0x958e3e9d
-DYNAMIC_SPACE_AND_SET_DEFINE_MEMBER_SLOW(moduleProgramExecutableSpace, destructibleCellHeapCellType.get(), ModuleProgramExecutable) // Hash:0x6506fa3c
</del><ins>+DYNAMIC_SPACE_AND_SET_DEFINE_MEMBER_SLOW(evalExecutableSpace, *destructibleCellHeapCellType, EvalExecutable) // Hash:0x958e3e9d
+DYNAMIC_SPACE_AND_SET_DEFINE_MEMBER_SLOW(moduleProgramExecutableSpace, *destructibleCellHeapCellType, ModuleProgramExecutable) // Hash:0x6506fa3c
</ins><span class="cx"> 
</span><span class="cx"> #undef DYNAMIC_SPACE_AND_SET_DEFINE_MEMBER_SLOW
</span><span class="cx"> 
</span></span></pre></div>
<a id="trunkSourceWebCoreChangeLog"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/ChangeLog (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/ChangeLog   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/ChangeLog      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,3 +1,190 @@
</span><ins>+2021-11-18  Mark Lam  <mark.lam@apple.com>
+
+        SubSpace constructors should take a const HeapCellType& instead of a HeapCellType*.
+        https://bugs.webkit.org/show_bug.cgi?id=233341
+        rdar://85573277
+
+        Reviewed by Yusuke Suzuki.
+
+        * bindings/js/JSFileSystemDirectoryHandleIterator.cpp:
+        (WebCore::JSFileSystemDirectoryHandleIterator::subspaceForImpl):
+        * bindings/js/WebCoreJSClientData.cpp:
+        (WebCore::JSVMClientData::JSVMClientData):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        (GenerateIterableDefinition):
+        * bindings/scripts/test/JS/JSDOMWindow.cpp:
+        (WebCore::JSDOMWindow::subspaceForImpl):
+        * bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp:
+        (WebCore::JSDedicatedWorkerGlobalScope::subspaceForImpl):
+        * bindings/scripts/test/JS/JSExposedStar.cpp:
+        (WebCore::JSExposedStar::subspaceForImpl):
+        * bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp:
+        (WebCore::JSExposedToWorkerAndWindow::subspaceForImpl):
+        * bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp:
+        (WebCore::JSPaintWorkletGlobalScope::subspaceForImpl):
+        * bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp:
+        (WebCore::JSServiceWorkerGlobalScope::subspaceForImpl):
+        * bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp:
+        (WebCore::JSSharedWorkerGlobalScope::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestCEReactions.cpp:
+        (WebCore::JSTestCEReactions::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp:
+        (WebCore::JSTestCEReactionsStringifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestCallTracer.cpp:
+        (WebCore::JSTestCallTracer::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp:
+        (WebCore::JSTestClassWithJSBuiltinConstructor::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestConditionalIncludes.cpp:
+        (WebCore::JSTestConditionalIncludes::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp:
+        (WebCore::JSTestConditionallyReadWrite::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDOMJIT.cpp:
+        (WebCore::JSTestDOMJIT::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDefaultToJSON.cpp:
+        (WebCore::JSTestDefaultToJSON::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp:
+        (WebCore::JSTestDefaultToJSONFilteredByExposed::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp:
+        (WebCore::JSTestDefaultToJSONIndirectInheritance::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp:
+        (WebCore::JSTestDefaultToJSONInherit::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp:
+        (WebCore::JSTestDefaultToJSONInheritFinal::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp:
+        (WebCore::JSTestDelegateToSharedSyntheticAttribute::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestDomainSecurity.cpp:
+        (WebCore::JSTestDomainSecurity::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestEnabledBySetting.cpp:
+        (WebCore::JSTestEnabledBySetting::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestEnabledForContext.cpp:
+        (WebCore::JSTestEnabledForContext::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestEventConstructor.cpp:
+        (WebCore::JSTestEventConstructor::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestEventTarget.cpp:
+        (WebCore::JSTestEventTarget::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestException.cpp:
+        (WebCore::JSTestException::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp:
+        (WebCore::JSTestGenerateAddOpaqueRoot::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp:
+        (WebCore::JSTestGenerateIsReachable::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestGlobalObject.cpp:
+        (WebCore::JSTestGlobalObject::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp:
+        (WebCore::JSTestIndexedSetterNoIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp:
+        (WebCore::JSTestIndexedSetterThrowingException::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp:
+        (WebCore::JSTestIndexedSetterWithIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::jsTestInterfacePrototypeFunction_entriesCaller):
+        (WebCore::JSTestInterface::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp:
+        (WebCore::JSTestInterfaceLeadingUnderscore::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestIterable.cpp:
+        (WebCore::jsTestIterablePrototypeFunction_entriesCaller):
+        (WebCore::JSTestIterable::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp:
+        (WebCore::JSTestJSBuiltinConstructor::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp:
+        (WebCore::JSTestLegacyFactoryFunction::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp:
+        (WebCore::JSTestLegacyNoInterfaceObject::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp:
+        (WebCore::JSTestLegacyOverrideBuiltIns::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestMapLike.cpp:
+        (WebCore::JSTestMapLike::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp:
+        (WebCore::JSTestMapLikeWithOverriddenOperations::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp:
+        (WebCore::JSTestNamedAndIndexedSetterNoIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp:
+        (WebCore::JSTestNamedAndIndexedSetterThrowingException::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp:
+        (WebCore::JSTestNamedAndIndexedSetterWithIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp:
+        (WebCore::JSTestNamedDeleterNoIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp:
+        (WebCore::JSTestNamedDeleterThrowingException::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp:
+        (WebCore::JSTestNamedDeleterWithIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp:
+        (WebCore::JSTestNamedDeleterWithIndexedGetter::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp:
+        (WebCore::JSTestNamedGetterCallWith::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp:
+        (WebCore::JSTestNamedGetterNoIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp:
+        (WebCore::JSTestNamedGetterWithIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp:
+        (WebCore::JSTestNamedSetterNoIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp:
+        (WebCore::JSTestNamedSetterThrowingException::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp:
+        (WebCore::JSTestNamedSetterWithIdentifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp:
+        (WebCore::JSTestNamedSetterWithIndexedGetter::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp:
+        (WebCore::JSTestNamedSetterWithIndexedGetterAndSetter::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp:
+        (WebCore::JSTestNamedSetterWithLegacyOverrideBuiltIns::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp:
+        (WebCore::JSTestNamedSetterWithLegacyUnforgeableProperties::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp:
+        (WebCore::JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNamespaceObject.cpp:
+        (WebCore::JSTestNamespaceObject::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestNode.cpp:
+        (WebCore::jsTestNodePrototypeFunction_entriesCaller):
+        (WebCore::JSTestNode::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObj::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestOperationConditional.cpp:
+        (WebCore::JSTestOperationConditional::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp:
+        (WebCore::JSTestOverloadedConstructors::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp:
+        (WebCore::JSTestOverloadedConstructorsWithSequence::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestPluginInterface.cpp:
+        (WebCore::JSTestPluginInterface::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp:
+        (WebCore::JSTestPromiseRejectionEvent::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp:
+        (WebCore::JSTestReadOnlyMapLike::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp:
+        (WebCore::JSTestReadOnlySetLike::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp:
+        (WebCore::JSTestReportExtraMemoryCost::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterface::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestSetLike.cpp:
+        (WebCore::JSTestSetLike::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp:
+        (WebCore::JSTestSetLikeWithOverriddenOperations::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifier.cpp:
+        (WebCore::JSTestStringifier::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp:
+        (WebCore::JSTestStringifierAnonymousOperation::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp:
+        (WebCore::JSTestStringifierNamedOperation::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp:
+        (WebCore::JSTestStringifierOperationImplementedAs::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp:
+        (WebCore::JSTestStringifierOperationNamedToString::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp:
+        (WebCore::JSTestStringifierReadOnlyAttribute::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp:
+        (WebCore::JSTestStringifierReadWriteAttribute::subspaceForImpl):
+        * bindings/scripts/test/JS/JSTestTypedefs.cpp:
+        (WebCore::JSTestTypedefs::subspaceForImpl):
+        * bindings/scripts/test/JS/JSWorkerGlobalScope.cpp:
+        (WebCore::JSWorkerGlobalScope::subspaceForImpl):
+        * bindings/scripts/test/JS/JSWorkletGlobalScope.cpp:
+        (WebCore::JSWorkletGlobalScope::subspaceForImpl):
+        * bridge/objc/objc_runtime.mm:
+        (JSC::Bindings::ObjcFallbackObjectImp::subspaceForImpl):
+
</ins><span class="cx"> 2021-11-18  Alex Christensen  <achristensen@webkit.org>
</span><span class="cx"> 
</span><span class="cx">         Allow all redirect schemes when compiling a content rule list
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsjsJSFileSystemDirectoryHandleIteratorcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/js/JSFileSystemDirectoryHandleIterator.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/js/JSFileSystemDirectoryHandleIterator.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/js/JSFileSystemDirectoryHandleIterator.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -55,9 +55,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSFileSystemDirectoryHandleIterator> || !JSFileSystemDirectoryHandleIterator::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSFileSystemDirectoryHandleIterator>)
</span><del>-        clientData.setFileSystemDirectoryHandleIteratorSpace(makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSFileSystemDirectoryHandleIterator));
</del><ins>+        clientData.setFileSystemDirectoryHandleIteratorSpace(makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSFileSystemDirectoryHandleIterator));
</ins><span class="cx">     else
</span><del>-        clientData.setFileSystemDirectoryHandleIteratorSpace(makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSFileSystemDirectoryHandleIterator));
</del><ins>+        clientData.setFileSystemDirectoryHandleIteratorSpace(makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSFileSystemDirectoryHandleIterator));
</ins><span class="cx">     auto* space = clientData.fileSystemDirectoryHandleIteratorSpace();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsjsWebCoreJSClientDatacpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/js/WebCoreJSClientData.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/js/WebCoreJSClientData.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/js/WebCoreJSClientData.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2017-2019 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2017-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -77,15 +77,15 @@
</span><span class="cx">     , m_heapCellTypeForJSAudioWorkletGlobalScope(JSC::IsoHeapCellType::create<JSAudioWorkletGlobalScope>())
</span><span class="cx"> #endif
</span><span class="cx">     , m_heapCellTypeForJSIDBSerializationGlobalObject(JSC::IsoHeapCellType::create<JSIDBSerializationGlobalObject>())
</span><del>-    , m_domBuiltinConstructorSpace ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSDOMBuiltinConstructorBase)
-    , m_domConstructorSpace ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSDOMConstructorBase)
-    , m_domNamespaceObjectSpace ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSDOMObject)
-    , m_domWindowPropertiesSpace ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSDOMWindowProperties)
-    , m_runtimeArraySpace ISO_SUBSPACE_INIT(vm.heap, m_runtimeArrayHeapCellType.get(), RuntimeArray)
-    , m_runtimeMethodSpace ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), RuntimeMethod) // Hash:0xf70c4a85
-    , m_runtimeObjectSpace ISO_SUBSPACE_INIT(vm.heap, m_runtimeObjectHeapCellType.get(), JSC::Bindings::RuntimeObject)
-    , m_windowProxySpace ISO_SUBSPACE_INIT(vm.heap, m_windowProxyHeapCellType.get(), JSWindowProxy)
-    , m_idbSerializationSpace ISO_SUBSPACE_INIT(vm.heap, m_heapCellTypeForJSIDBSerializationGlobalObject.get(), JSIDBSerializationGlobalObject)
</del><ins>+    , m_domBuiltinConstructorSpace ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSDOMBuiltinConstructorBase)
+    , m_domConstructorSpace ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSDOMConstructorBase)
+    , m_domNamespaceObjectSpace ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSDOMObject)
+    , m_domWindowPropertiesSpace ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSDOMWindowProperties)
+    , m_runtimeArraySpace ISO_SUBSPACE_INIT(vm.heap, *m_runtimeArrayHeapCellType, RuntimeArray)
+    , m_runtimeMethodSpace ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, RuntimeMethod) // Hash:0xf70c4a85
+    , m_runtimeObjectSpace ISO_SUBSPACE_INIT(vm.heap, *m_runtimeObjectHeapCellType, JSC::Bindings::RuntimeObject)
+    , m_windowProxySpace ISO_SUBSPACE_INIT(vm.heap, *m_windowProxyHeapCellType, JSWindowProxy)
+    , m_idbSerializationSpace ISO_SUBSPACE_INIT(vm.heap, *m_heapCellTypeForJSIDBSerializationGlobalObject, JSIDBSerializationGlobalObject)
</ins><span class="cx">     , m_subspaces(makeUnique<DOMIsoSubspaces>())
</span><span class="cx"> {
</span><span class="cx"> }
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptsCodeGeneratorJSpm"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/CodeGeneratorJS.pm (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/CodeGeneratorJS.pm 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/CodeGeneratorJS.pm    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -4852,13 +4852,13 @@
</span><span class="cx">     push(@implContent, "    if (auto* space = spaces.m_subspaceFor${interfaceName}.get())\n");
</span><span class="cx">     push(@implContent, "        return space;\n");
</span><span class="cx">     if (IsDOMGlobalObject($interface)) {
</span><del>-        push(@implContent, "    spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeFor${className}.get(), ${className});\n");
</del><ins>+        push(@implContent, "    spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeFor${className}, ${className});\n");
</ins><span class="cx">     } else {
</span><span class="cx">         push(@implContent, "    static_assert(std::is_base_of_v<JSC::JSDestructibleObject, ${className}> || !${className}::needsDestruction);\n");
</span><span class="cx">         push(@implContent, "    if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, ${className}>)\n");
</span><del>-        push(@implContent, "        spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), ${className});\n");
</del><ins>+        push(@implContent, "        spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, ${className});\n");
</ins><span class="cx">         push(@implContent, "    else\n");
</span><del>-        push(@implContent, "        spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), ${className});\n");
</del><ins>+        push(@implContent, "        spaces.m_subspaceFor${interfaceName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, ${className});\n");
</ins><span class="cx">     }
</span><span class="cx">     push(@implContent, "    auto* space = spaces.m_subspaceFor${interfaceName}.get();\n");
</span><span class="cx">     push(@implContent, "IGNORE_WARNINGS_BEGIN(\"unreachable-code\")\n");
</span><span class="lines">@@ -6731,9 +6731,9 @@
</span><span class="cx">             return space;
</span><span class="cx">         static_assert(std::is_base_of_v<JSC::JSDestructibleObject, ${iteratorName}> || !${iteratorName}::needsDestruction);
</span><span class="cx">         if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, ${iteratorName}>)
</span><del>-            spaces.m_subspaceFor${iteratorName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), ${iteratorName});
</del><ins>+            spaces.m_subspaceFor${iteratorName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType.get(), ${iteratorName});
</ins><span class="cx">         else
</span><del>-            spaces.m_subspaceFor${iteratorName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), ${iteratorName});
</del><ins>+            spaces.m_subspaceFor${iteratorName} = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, ${iteratorName});
</ins><span class="cx">         auto* space = spaces.m_subspaceFor${iteratorName}.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN(\"unreachable-code\")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN(\"tautological-compare\")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSDOMWindowcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSDOMWindow.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSDOMWindow.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSDOMWindow.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -369,7 +369,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForDOMWindow.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForDOMWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSDOMWindow.get(), JSDOMWindow);
</del><ins>+    spaces.m_subspaceForDOMWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSDOMWindow, JSDOMWindow);
</ins><span class="cx">     auto* space = spaces.m_subspaceForDOMWindow.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSDedicatedWorkerGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSDedicatedWorkerGlobalScope.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -170,7 +170,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForDedicatedWorkerGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForDedicatedWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSDedicatedWorkerGlobalScope.get(), JSDedicatedWorkerGlobalScope);
</del><ins>+    spaces.m_subspaceForDedicatedWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSDedicatedWorkerGlobalScope, JSDedicatedWorkerGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForDedicatedWorkerGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSExposedStarcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedStar.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedStar.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedStar.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -236,9 +236,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSExposedStar> || !JSExposedStar::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSExposedStar>)
</span><del>-        spaces.m_subspaceForExposedStar = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSExposedStar);
</del><ins>+        spaces.m_subspaceForExposedStar = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSExposedStar);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForExposedStar = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSExposedStar);
</del><ins>+        spaces.m_subspaceForExposedStar = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSExposedStar);
</ins><span class="cx">     auto* space = spaces.m_subspaceForExposedStar.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSExposedToWorkerAndWindowcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSExposedToWorkerAndWindow.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -252,9 +252,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSExposedToWorkerAndWindow> || !JSExposedToWorkerAndWindow::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSExposedToWorkerAndWindow>)
</span><del>-        spaces.m_subspaceForExposedToWorkerAndWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSExposedToWorkerAndWindow);
</del><ins>+        spaces.m_subspaceForExposedToWorkerAndWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSExposedToWorkerAndWindow);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForExposedToWorkerAndWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSExposedToWorkerAndWindow);
</del><ins>+        spaces.m_subspaceForExposedToWorkerAndWindow = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSExposedToWorkerAndWindow);
</ins><span class="cx">     auto* space = spaces.m_subspaceForExposedToWorkerAndWindow.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSPaintWorkletGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSPaintWorkletGlobalScope.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -169,7 +169,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForPaintWorkletGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForPaintWorkletGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSPaintWorkletGlobalScope.get(), JSPaintWorkletGlobalScope);
</del><ins>+    spaces.m_subspaceForPaintWorkletGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSPaintWorkletGlobalScope, JSPaintWorkletGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForPaintWorkletGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSServiceWorkerGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSServiceWorkerGlobalScope.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -169,7 +169,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForServiceWorkerGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForServiceWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSServiceWorkerGlobalScope.get(), JSServiceWorkerGlobalScope);
</del><ins>+    spaces.m_subspaceForServiceWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSServiceWorkerGlobalScope, JSServiceWorkerGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForServiceWorkerGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSSharedWorkerGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSSharedWorkerGlobalScope.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -153,7 +153,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForSharedWorkerGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForSharedWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSSharedWorkerGlobalScope.get(), JSSharedWorkerGlobalScope);
</del><ins>+    spaces.m_subspaceForSharedWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSSharedWorkerGlobalScope, JSSharedWorkerGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForSharedWorkerGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestCEReactionscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactions.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactions.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactions.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -438,9 +438,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestCEReactions> || !JSTestCEReactions::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestCEReactions>)
</span><del>-        spaces.m_subspaceForTestCEReactions = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestCEReactions);
</del><ins>+        spaces.m_subspaceForTestCEReactions = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestCEReactions);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestCEReactions = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestCEReactions);
</del><ins>+        spaces.m_subspaceForTestCEReactions = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestCEReactions);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestCEReactions.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestCEReactionsStringifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCEReactionsStringifier.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -264,9 +264,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestCEReactionsStringifier> || !JSTestCEReactionsStringifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestCEReactionsStringifier>)
</span><del>-        spaces.m_subspaceForTestCEReactionsStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestCEReactionsStringifier);
</del><ins>+        spaces.m_subspaceForTestCEReactionsStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestCEReactionsStringifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestCEReactionsStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestCEReactionsStringifier);
</del><ins>+        spaces.m_subspaceForTestCEReactionsStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestCEReactionsStringifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestCEReactionsStringifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestCallTracercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCallTracer.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCallTracer.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestCallTracer.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -513,9 +513,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestCallTracer> || !JSTestCallTracer::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestCallTracer>)
</span><del>-        spaces.m_subspaceForTestCallTracer = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestCallTracer);
</del><ins>+        spaces.m_subspaceForTestCallTracer = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestCallTracer);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestCallTracer = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestCallTracer);
</del><ins>+        spaces.m_subspaceForTestCallTracer = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestCallTracer);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestCallTracer.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestClassWithJSBuiltinConstructorcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestClassWithJSBuiltinConstructor.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -176,9 +176,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestClassWithJSBuiltinConstructor> || !JSTestClassWithJSBuiltinConstructor::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestClassWithJSBuiltinConstructor>)
</span><del>-        spaces.m_subspaceForTestClassWithJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestClassWithJSBuiltinConstructor);
</del><ins>+        spaces.m_subspaceForTestClassWithJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestClassWithJSBuiltinConstructor);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestClassWithJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestClassWithJSBuiltinConstructor);
</del><ins>+        spaces.m_subspaceForTestClassWithJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestClassWithJSBuiltinConstructor);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestClassWithJSBuiltinConstructor.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestConditionalIncludescpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionalIncludes.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionalIncludes.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionalIncludes.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -789,9 +789,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestConditionalIncludes> || !JSTestConditionalIncludes::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestConditionalIncludes>)
</span><del>-        spaces.m_subspaceForTestConditionalIncludes = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestConditionalIncludes);
</del><ins>+        spaces.m_subspaceForTestConditionalIncludes = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestConditionalIncludes);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestConditionalIncludes = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestConditionalIncludes);
</del><ins>+        spaces.m_subspaceForTestConditionalIncludes = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestConditionalIncludes);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestConditionalIncludes.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestConditionallyReadWritecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestConditionallyReadWrite.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -611,9 +611,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestConditionallyReadWrite> || !JSTestConditionallyReadWrite::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestConditionallyReadWrite>)
</span><del>-        spaces.m_subspaceForTestConditionallyReadWrite = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestConditionallyReadWrite);
</del><ins>+        spaces.m_subspaceForTestConditionallyReadWrite = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestConditionallyReadWrite);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestConditionallyReadWrite = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestConditionallyReadWrite);
</del><ins>+        spaces.m_subspaceForTestConditionallyReadWrite = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestConditionallyReadWrite);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestConditionallyReadWrite.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDOMJITcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDOMJIT.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDOMJIT.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDOMJIT.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1252,9 +1252,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDOMJIT> || !JSTestDOMJIT::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDOMJIT>)
</span><del>-        spaces.m_subspaceForTestDOMJIT = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDOMJIT);
</del><ins>+        spaces.m_subspaceForTestDOMJIT = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDOMJIT);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDOMJIT = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDOMJIT);
</del><ins>+        spaces.m_subspaceForTestDOMJIT = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDOMJIT);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDOMJIT.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSON.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSON.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSON.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -808,9 +808,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSON> || !JSTestDefaultToJSON::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSON>)
</span><del>-        spaces.m_subspaceForTestDefaultToJSON = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDefaultToJSON);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSON = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDefaultToJSON);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDefaultToJSON = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDefaultToJSON);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSON = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDefaultToJSON);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDefaultToJSON.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONFilteredByExposedcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONFilteredByExposed.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -270,9 +270,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONFilteredByExposed> || !JSTestDefaultToJSONFilteredByExposed::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONFilteredByExposed>)
</span><del>-        spaces.m_subspaceForTestDefaultToJSONFilteredByExposed = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDefaultToJSONFilteredByExposed);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONFilteredByExposed = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDefaultToJSONFilteredByExposed);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDefaultToJSONFilteredByExposed = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDefaultToJSONFilteredByExposed);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONFilteredByExposed = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDefaultToJSONFilteredByExposed);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDefaultToJSONFilteredByExposed.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONIndirectInheritancecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONIndirectInheritance.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -162,9 +162,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONIndirectInheritance> || !JSTestDefaultToJSONIndirectInheritance::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONIndirectInheritance>)
</span><del>-        spaces.m_subspaceForTestDefaultToJSONIndirectInheritance = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDefaultToJSONIndirectInheritance);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONIndirectInheritance = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDefaultToJSONIndirectInheritance);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDefaultToJSONIndirectInheritance = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDefaultToJSONIndirectInheritance);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONIndirectInheritance = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDefaultToJSONIndirectInheritance);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDefaultToJSONIndirectInheritance.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONInheritcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInherit.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -292,9 +292,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONInherit> || !JSTestDefaultToJSONInherit::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONInherit>)
</span><del>-        spaces.m_subspaceForTestDefaultToJSONInherit = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDefaultToJSONInherit);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONInherit = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDefaultToJSONInherit);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDefaultToJSONInherit = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDefaultToJSONInherit);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONInherit = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDefaultToJSONInherit);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDefaultToJSONInherit.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDefaultToJSONInheritFinalcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDefaultToJSONInheritFinal.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -332,9 +332,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONInheritFinal> || !JSTestDefaultToJSONInheritFinal::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDefaultToJSONInheritFinal>)
</span><del>-        spaces.m_subspaceForTestDefaultToJSONInheritFinal = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDefaultToJSONInheritFinal);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONInheritFinal = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDefaultToJSONInheritFinal);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDefaultToJSONInheritFinal = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDefaultToJSONInheritFinal);
</del><ins>+        spaces.m_subspaceForTestDefaultToJSONInheritFinal = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDefaultToJSONInheritFinal);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDefaultToJSONInheritFinal.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDelegateToSharedSyntheticAttributecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDelegateToSharedSyntheticAttribute.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -246,9 +246,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDelegateToSharedSyntheticAttribute> || !JSTestDelegateToSharedSyntheticAttribute::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDelegateToSharedSyntheticAttribute>)
</span><del>-        spaces.m_subspaceForTestDelegateToSharedSyntheticAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDelegateToSharedSyntheticAttribute);
</del><ins>+        spaces.m_subspaceForTestDelegateToSharedSyntheticAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDelegateToSharedSyntheticAttribute);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDelegateToSharedSyntheticAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDelegateToSharedSyntheticAttribute);
</del><ins>+        spaces.m_subspaceForTestDelegateToSharedSyntheticAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDelegateToSharedSyntheticAttribute);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDelegateToSharedSyntheticAttribute.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestDomainSecuritycpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDomainSecurity.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDomainSecurity.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestDomainSecurity.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -320,9 +320,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestDomainSecurity> || !JSTestDomainSecurity::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestDomainSecurity>)
</span><del>-        spaces.m_subspaceForTestDomainSecurity = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestDomainSecurity);
</del><ins>+        spaces.m_subspaceForTestDomainSecurity = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestDomainSecurity);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestDomainSecurity = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestDomainSecurity);
</del><ins>+        spaces.m_subspaceForTestDomainSecurity = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestDomainSecurity);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestDomainSecurity.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestEnabledBySettingcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledBySetting.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledBySetting.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledBySetting.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -459,9 +459,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestEnabledBySetting> || !JSTestEnabledBySetting::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestEnabledBySetting>)
</span><del>-        spaces.m_subspaceForTestEnabledBySetting = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestEnabledBySetting);
</del><ins>+        spaces.m_subspaceForTestEnabledBySetting = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestEnabledBySetting);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestEnabledBySetting = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestEnabledBySetting);
</del><ins>+        spaces.m_subspaceForTestEnabledBySetting = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestEnabledBySetting);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestEnabledBySetting.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestEnabledForContextcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledForContext.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledForContext.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEnabledForContext.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -186,9 +186,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestEnabledForContext> || !JSTestEnabledForContext::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestEnabledForContext>)
</span><del>-        spaces.m_subspaceForTestEnabledForContext = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestEnabledForContext);
</del><ins>+        spaces.m_subspaceForTestEnabledForContext = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestEnabledForContext);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestEnabledForContext = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestEnabledForContext);
</del><ins>+        spaces.m_subspaceForTestEnabledForContext = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestEnabledForContext);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestEnabledForContext.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestEventConstructorcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventConstructor.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventConstructor.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventConstructor.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -321,9 +321,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestEventConstructor> || !JSTestEventConstructor::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestEventConstructor>)
</span><del>-        spaces.m_subspaceForTestEventConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestEventConstructor);
</del><ins>+        spaces.m_subspaceForTestEventConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestEventConstructor);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestEventConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestEventConstructor);
</del><ins>+        spaces.m_subspaceForTestEventConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestEventConstructor);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestEventConstructor.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestEventTargetcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventTarget.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventTarget.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestEventTarget.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -262,9 +262,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestEventTarget> || !JSTestEventTarget::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestEventTarget>)
</span><del>-        spaces.m_subspaceForTestEventTarget = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestEventTarget);
</del><ins>+        spaces.m_subspaceForTestEventTarget = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestEventTarget);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestEventTarget = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestEventTarget);
</del><ins>+        spaces.m_subspaceForTestEventTarget = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestEventTarget);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestEventTarget.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestExceptioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestException.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestException.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestException.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -187,9 +187,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestException> || !JSTestException::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestException>)
</span><del>-        spaces.m_subspaceForTestException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestException);
</del><ins>+        spaces.m_subspaceForTestException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestException);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestException);
</del><ins>+        spaces.m_subspaceForTestException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestException);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestException.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestGenerateAddOpaqueRootcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateAddOpaqueRoot.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -187,9 +187,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestGenerateAddOpaqueRoot> || !JSTestGenerateAddOpaqueRoot::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestGenerateAddOpaqueRoot>)
</span><del>-        spaces.m_subspaceForTestGenerateAddOpaqueRoot = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestGenerateAddOpaqueRoot);
</del><ins>+        spaces.m_subspaceForTestGenerateAddOpaqueRoot = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestGenerateAddOpaqueRoot);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestGenerateAddOpaqueRoot = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestGenerateAddOpaqueRoot);
</del><ins>+        spaces.m_subspaceForTestGenerateAddOpaqueRoot = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestGenerateAddOpaqueRoot);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestGenerateAddOpaqueRoot.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestGenerateIsReachablecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGenerateIsReachable.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -197,9 +197,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestGenerateIsReachable> || !JSTestGenerateIsReachable::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestGenerateIsReachable>)
</span><del>-        spaces.m_subspaceForTestGenerateIsReachable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestGenerateIsReachable);
</del><ins>+        spaces.m_subspaceForTestGenerateIsReachable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestGenerateIsReachable);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestGenerateIsReachable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestGenerateIsReachable);
</del><ins>+        spaces.m_subspaceForTestGenerateIsReachable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestGenerateIsReachable);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestGenerateIsReachable.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestGlobalObjectcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGlobalObject.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGlobalObject.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestGlobalObject.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1814,7 +1814,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForTestGlobalObject.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForTestGlobalObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSTestGlobalObject.get(), JSTestGlobalObject);
</del><ins>+    spaces.m_subspaceForTestGlobalObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSTestGlobalObject, JSTestGlobalObject);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestGlobalObject.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterNoIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterNoIdentifier.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -276,9 +276,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterNoIdentifier> || !JSTestIndexedSetterNoIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterNoIdentifier>)
</span><del>-        spaces.m_subspaceForTestIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestIndexedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestIndexedSetterNoIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestIndexedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestIndexedSetterNoIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestIndexedSetterNoIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterThrowingExceptioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterThrowingException.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -276,9 +276,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterThrowingException> || !JSTestIndexedSetterThrowingException::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterThrowingException>)
</span><del>-        spaces.m_subspaceForTestIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestIndexedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestIndexedSetterThrowingException);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestIndexedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestIndexedSetterThrowingException);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestIndexedSetterThrowingException.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestIndexedSetterWithIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIndexedSetterWithIdentifier.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -308,9 +308,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterWithIdentifier> || !JSTestIndexedSetterWithIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestIndexedSetterWithIdentifier>)
</span><del>-        spaces.m_subspaceForTestIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestIndexedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestIndexedSetterWithIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestIndexedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestIndexedSetterWithIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestIndexedSetterWithIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestInterfacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterface.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterface.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterface.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1104,9 +1104,9 @@
</span><span class="cx">             return space;
</span><span class="cx">         static_assert(std::is_base_of_v<JSC::JSDestructibleObject, TestInterfaceIterator> || !TestInterfaceIterator::needsDestruction);
</span><span class="cx">         if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, TestInterfaceIterator>)
</span><del>-            spaces.m_subspaceForTestInterfaceIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), TestInterfaceIterator);
</del><ins>+            spaces.m_subspaceForTestInterfaceIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType.get(), TestInterfaceIterator);
</ins><span class="cx">         else
</span><del>-            spaces.m_subspaceForTestInterfaceIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), TestInterfaceIterator);
</del><ins>+            spaces.m_subspaceForTestInterfaceIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, TestInterfaceIterator);
</ins><span class="cx">         auto* space = spaces.m_subspaceForTestInterfaceIterator.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span><span class="lines">@@ -1196,9 +1196,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestInterface> || !JSTestInterface::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestInterface>)
</span><del>-        spaces.m_subspaceForTestInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestInterface);
</del><ins>+        spaces.m_subspaceForTestInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestInterface);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestInterface);
</del><ins>+        spaces.m_subspaceForTestInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestInterface);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestInterface.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestInterfaceLeadingUnderscorecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestInterfaceLeadingUnderscore.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -187,9 +187,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestInterfaceLeadingUnderscore> || !JSTestInterfaceLeadingUnderscore::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestInterfaceLeadingUnderscore>)
</span><del>-        spaces.m_subspaceForTestInterfaceLeadingUnderscore = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestInterfaceLeadingUnderscore);
</del><ins>+        spaces.m_subspaceForTestInterfaceLeadingUnderscore = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestInterfaceLeadingUnderscore);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestInterfaceLeadingUnderscore = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestInterfaceLeadingUnderscore);
</del><ins>+        spaces.m_subspaceForTestInterfaceLeadingUnderscore = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestInterfaceLeadingUnderscore);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestInterfaceLeadingUnderscore.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestIterablecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIterable.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIterable.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestIterable.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -201,9 +201,9 @@
</span><span class="cx">             return space;
</span><span class="cx">         static_assert(std::is_base_of_v<JSC::JSDestructibleObject, TestIterableIterator> || !TestIterableIterator::needsDestruction);
</span><span class="cx">         if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, TestIterableIterator>)
</span><del>-            spaces.m_subspaceForTestIterableIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), TestIterableIterator);
</del><ins>+            spaces.m_subspaceForTestIterableIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType.get(), TestIterableIterator);
</ins><span class="cx">         else
</span><del>-            spaces.m_subspaceForTestIterableIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), TestIterableIterator);
</del><ins>+            spaces.m_subspaceForTestIterableIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, TestIterableIterator);
</ins><span class="cx">         auto* space = spaces.m_subspaceForTestIterableIterator.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span><span class="lines">@@ -293,9 +293,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestIterable> || !JSTestIterable::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestIterable>)
</span><del>-        spaces.m_subspaceForTestIterable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestIterable);
</del><ins>+        spaces.m_subspaceForTestIterable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestIterable);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestIterable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestIterable);
</del><ins>+        spaces.m_subspaceForTestIterable = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestIterable);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestIterable.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestJSBuiltinConstructorcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestJSBuiltinConstructor.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -230,9 +230,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestJSBuiltinConstructor> || !JSTestJSBuiltinConstructor::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestJSBuiltinConstructor>)
</span><del>-        spaces.m_subspaceForTestJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestJSBuiltinConstructor);
</del><ins>+        spaces.m_subspaceForTestJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestJSBuiltinConstructor);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestJSBuiltinConstructor);
</del><ins>+        spaces.m_subspaceForTestJSBuiltinConstructor = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestJSBuiltinConstructor);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestJSBuiltinConstructor.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestLegacyFactoryFunctioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyFactoryFunction.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -230,9 +230,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyFactoryFunction> || !JSTestLegacyFactoryFunction::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyFactoryFunction>)
</span><del>-        spaces.m_subspaceForTestLegacyFactoryFunction = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestLegacyFactoryFunction);
</del><ins>+        spaces.m_subspaceForTestLegacyFactoryFunction = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestLegacyFactoryFunction);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestLegacyFactoryFunction = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestLegacyFactoryFunction);
</del><ins>+        spaces.m_subspaceForTestLegacyFactoryFunction = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestLegacyFactoryFunction);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestLegacyFactoryFunction.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestLegacyNoInterfaceObjectcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyNoInterfaceObject.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -335,9 +335,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyNoInterfaceObject> || !JSTestLegacyNoInterfaceObject::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyNoInterfaceObject>)
</span><del>-        spaces.m_subspaceForTestLegacyNoInterfaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestLegacyNoInterfaceObject);
</del><ins>+        spaces.m_subspaceForTestLegacyNoInterfaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestLegacyNoInterfaceObject);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestLegacyNoInterfaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestLegacyNoInterfaceObject);
</del><ins>+        spaces.m_subspaceForTestLegacyNoInterfaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestLegacyNoInterfaceObject);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestLegacyNoInterfaceObject.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestLegacyOverrideBuiltInscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestLegacyOverrideBuiltIns.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -249,9 +249,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyOverrideBuiltIns> || !JSTestLegacyOverrideBuiltIns::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestLegacyOverrideBuiltIns>)
</span><del>-        spaces.m_subspaceForTestLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestLegacyOverrideBuiltIns);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestLegacyOverrideBuiltIns);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestLegacyOverrideBuiltIns.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestMapLikecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLike.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLike.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLike.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -366,9 +366,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestMapLike> || !JSTestMapLike::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestMapLike>)
</span><del>-        spaces.m_subspaceForTestMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestMapLike);
</del><ins>+        spaces.m_subspaceForTestMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestMapLike);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestMapLike);
</del><ins>+        spaces.m_subspaceForTestMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestMapLike);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestMapLike.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestMapLikeWithOverriddenOperationscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestMapLikeWithOverriddenOperations.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -380,9 +380,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestMapLikeWithOverriddenOperations> || !JSTestMapLikeWithOverriddenOperations::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestMapLikeWithOverriddenOperations>)
</span><del>-        spaces.m_subspaceForTestMapLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestMapLikeWithOverriddenOperations);
</del><ins>+        spaces.m_subspaceForTestMapLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestMapLikeWithOverriddenOperations);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestMapLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestMapLikeWithOverriddenOperations);
</del><ins>+        spaces.m_subspaceForTestMapLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestMapLikeWithOverriddenOperations);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestMapLikeWithOverriddenOperations.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterNoIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterNoIdentifier.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -344,9 +344,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterNoIdentifier> || !JSTestNamedAndIndexedSetterNoIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterNoIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedAndIndexedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedAndIndexedSetterNoIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedAndIndexedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedAndIndexedSetterNoIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedAndIndexedSetterNoIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterThrowingExceptioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterThrowingException.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -344,9 +344,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterThrowingException> || !JSTestNamedAndIndexedSetterThrowingException::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterThrowingException>)
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedAndIndexedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedAndIndexedSetterThrowingException);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedAndIndexedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedAndIndexedSetterThrowingException);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedAndIndexedSetterThrowingException.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedAndIndexedSetterWithIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedAndIndexedSetterWithIdentifier.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -401,9 +401,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterWithIdentifier> || !JSTestNamedAndIndexedSetterWithIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedAndIndexedSetterWithIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedAndIndexedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedAndIndexedSetterWithIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedAndIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedAndIndexedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedAndIndexedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedAndIndexedSetterWithIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedAndIndexedSetterWithIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterNoIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterNoIdentifier.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -246,9 +246,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterNoIdentifier> || !JSTestNamedDeleterNoIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterNoIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedDeleterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedDeleterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedDeleterNoIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedDeleterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedDeleterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedDeleterNoIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedDeleterNoIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterThrowingExceptioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterThrowingException.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -246,9 +246,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterThrowingException> || !JSTestNamedDeleterThrowingException::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterThrowingException>)
</span><del>-        spaces.m_subspaceForTestNamedDeleterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedDeleterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedDeleterThrowingException);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedDeleterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedDeleterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedDeleterThrowingException);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedDeleterThrowingException.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterWithIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIdentifier.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -270,9 +270,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterWithIdentifier> || !JSTestNamedDeleterWithIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterWithIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedDeleterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedDeleterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedDeleterWithIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedDeleterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedDeleterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedDeleterWithIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedDeleterWithIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedDeleterWithIndexedGettercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedDeleterWithIndexedGetter.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -262,9 +262,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterWithIndexedGetter> || !JSTestNamedDeleterWithIndexedGetter::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedDeleterWithIndexedGetter>)
</span><del>-        spaces.m_subspaceForTestNamedDeleterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedDeleterWithIndexedGetter);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedDeleterWithIndexedGetter);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedDeleterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedDeleterWithIndexedGetter);
</del><ins>+        spaces.m_subspaceForTestNamedDeleterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedDeleterWithIndexedGetter);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedDeleterWithIndexedGetter.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterCallWithcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterCallWith.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -220,9 +220,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterCallWith> || !JSTestNamedGetterCallWith::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterCallWith>)
</span><del>-        spaces.m_subspaceForTestNamedGetterCallWith = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedGetterCallWith);
</del><ins>+        spaces.m_subspaceForTestNamedGetterCallWith = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedGetterCallWith);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedGetterCallWith = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedGetterCallWith);
</del><ins>+        spaces.m_subspaceForTestNamedGetterCallWith = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedGetterCallWith);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedGetterCallWith.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterNoIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterNoIdentifier.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -220,9 +220,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterNoIdentifier> || !JSTestNamedGetterNoIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterNoIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedGetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedGetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedGetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedGetterNoIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedGetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedGetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedGetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedGetterNoIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedGetterNoIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedGetterWithIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedGetterWithIdentifier.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -246,9 +246,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterWithIdentifier> || !JSTestNamedGetterWithIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedGetterWithIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedGetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedGetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedGetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedGetterWithIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedGetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedGetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedGetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedGetterWithIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedGetterWithIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterNoIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterNoIdentifier.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -300,9 +300,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterNoIdentifier> || !JSTestNamedSetterNoIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterNoIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterNoIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterNoIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedSetterNoIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterNoIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterNoIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterThrowingExceptioncpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterThrowingException.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -300,9 +300,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterThrowingException> || !JSTestNamedSetterThrowingException::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterThrowingException>)
</span><del>-        spaces.m_subspaceForTestNamedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterThrowingException);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterThrowingException);
</del><ins>+        spaces.m_subspaceForTestNamedSetterThrowingException = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterThrowingException);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterThrowingException.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIdentifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIdentifier.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -331,9 +331,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIdentifier> || !JSTestNamedSetterWithIdentifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIdentifier>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithIdentifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithIdentifier);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIdentifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithIdentifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithIdentifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIndexedGettercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetter.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -378,9 +378,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIndexedGetter> || !JSTestNamedSetterWithIndexedGetter::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIndexedGetter>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithIndexedGetter);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithIndexedGetter);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithIndexedGetter);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIndexedGetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithIndexedGetter);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithIndexedGetter.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithIndexedGetterAndSettercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithIndexedGetterAndSetter.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -428,9 +428,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIndexedGetterAndSetter> || !JSTestNamedSetterWithIndexedGetterAndSetter::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithIndexedGetterAndSetter>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIndexedGetterAndSetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithIndexedGetterAndSetter);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIndexedGetterAndSetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithIndexedGetterAndSetter);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithIndexedGetterAndSetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithIndexedGetterAndSetter);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithIndexedGetterAndSetter = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithIndexedGetterAndSetter);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithIndexedGetterAndSetter.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyOverrideBuiltInscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyOverrideBuiltIns.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -277,9 +277,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyOverrideBuiltIns> || !JSTestNamedSetterWithLegacyOverrideBuiltIns::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyOverrideBuiltIns>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithLegacyOverrideBuiltIns);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithLegacyOverrideBuiltIns);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithLegacyOverrideBuiltIns.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyUnforgeablePropertiescpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeableProperties.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -361,9 +361,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyUnforgeableProperties> || !JSTestNamedSetterWithLegacyUnforgeableProperties::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyUnforgeableProperties>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeableProperties = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithLegacyUnforgeableProperties);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeableProperties = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithLegacyUnforgeableProperties);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeableProperties = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithLegacyUnforgeableProperties);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeableProperties = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithLegacyUnforgeableProperties);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeableProperties.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltInscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -338,9 +338,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns> || !JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns>)
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns);
</del><ins>+        spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamedSetterWithLegacyUnforgeablePropertiesAndLegacyOverrideBuiltIns.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNamespaceObjectcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamespaceObject.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamespaceObject.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNamespaceObject.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -280,9 +280,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamespaceObject> || !JSTestNamespaceObject::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNamespaceObject>)
</span><del>-        spaces.m_subspaceForTestNamespaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNamespaceObject);
</del><ins>+        spaces.m_subspaceForTestNamespaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNamespaceObject);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNamespaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNamespaceObject);
</del><ins>+        spaces.m_subspaceForTestNamespaceObject = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNamespaceObject);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNamespaceObject.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestNodecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNode.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNode.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestNode.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -405,9 +405,9 @@
</span><span class="cx">             return space;
</span><span class="cx">         static_assert(std::is_base_of_v<JSC::JSDestructibleObject, TestNodeIterator> || !TestNodeIterator::needsDestruction);
</span><span class="cx">         if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, TestNodeIterator>)
</span><del>-            spaces.m_subspaceForTestNodeIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), TestNodeIterator);
</del><ins>+            spaces.m_subspaceForTestNodeIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType.get(), TestNodeIterator);
</ins><span class="cx">         else
</span><del>-            spaces.m_subspaceForTestNodeIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), TestNodeIterator);
</del><ins>+            spaces.m_subspaceForTestNodeIterator = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, TestNodeIterator);
</ins><span class="cx">         auto* space = spaces.m_subspaceForTestNodeIterator.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span><span class="lines">@@ -497,9 +497,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestNode> || !JSTestNode::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestNode>)
</span><del>-        spaces.m_subspaceForTestNode = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestNode);
</del><ins>+        spaces.m_subspaceForTestNode = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestNode);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestNode = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestNode);
</del><ins>+        spaces.m_subspaceForTestNode = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestNode);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestNode.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestObjcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestObj.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestObj.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestObj.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -9006,9 +9006,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestObj> || !JSTestObj::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestObj>)
</span><del>-        spaces.m_subspaceForTestObj = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestObj);
</del><ins>+        spaces.m_subspaceForTestObj = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestObj);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestObj = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestObj);
</del><ins>+        spaces.m_subspaceForTestObj = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestObj);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestObj.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestOperationConditionalcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOperationConditional.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOperationConditional.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOperationConditional.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -234,9 +234,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestOperationConditional> || !JSTestOperationConditional::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestOperationConditional>)
</span><del>-        spaces.m_subspaceForTestOperationConditional = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestOperationConditional);
</del><ins>+        spaces.m_subspaceForTestOperationConditional = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestOperationConditional);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestOperationConditional = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestOperationConditional);
</del><ins>+        spaces.m_subspaceForTestOperationConditional = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestOperationConditional);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestOperationConditional.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestOverloadedConstructorscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructors.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -295,9 +295,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestOverloadedConstructors> || !JSTestOverloadedConstructors::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestOverloadedConstructors>)
</span><del>-        spaces.m_subspaceForTestOverloadedConstructors = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestOverloadedConstructors);
</del><ins>+        spaces.m_subspaceForTestOverloadedConstructors = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestOverloadedConstructors);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestOverloadedConstructors = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestOverloadedConstructors);
</del><ins>+        spaces.m_subspaceForTestOverloadedConstructors = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestOverloadedConstructors);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestOverloadedConstructors.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestOverloadedConstructorsWithSequencecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp       2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestOverloadedConstructorsWithSequence.cpp  2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -238,9 +238,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestOverloadedConstructorsWithSequence> || !JSTestOverloadedConstructorsWithSequence::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestOverloadedConstructorsWithSequence>)
</span><del>-        spaces.m_subspaceForTestOverloadedConstructorsWithSequence = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestOverloadedConstructorsWithSequence);
</del><ins>+        spaces.m_subspaceForTestOverloadedConstructorsWithSequence = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestOverloadedConstructorsWithSequence);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestOverloadedConstructorsWithSequence = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestOverloadedConstructorsWithSequence);
</del><ins>+        spaces.m_subspaceForTestOverloadedConstructorsWithSequence = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestOverloadedConstructorsWithSequence);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestOverloadedConstructorsWithSequence.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestPluginInterfacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPluginInterface.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPluginInterface.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPluginInterface.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -244,9 +244,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestPluginInterface> || !JSTestPluginInterface::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestPluginInterface>)
</span><del>-        spaces.m_subspaceForTestPluginInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestPluginInterface);
</del><ins>+        spaces.m_subspaceForTestPluginInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestPluginInterface);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestPluginInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestPluginInterface);
</del><ins>+        spaces.m_subspaceForTestPluginInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestPluginInterface);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestPluginInterface.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestPromiseRejectionEventcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestPromiseRejectionEvent.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -301,9 +301,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestPromiseRejectionEvent> || !JSTestPromiseRejectionEvent::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestPromiseRejectionEvent>)
</span><del>-        spaces.m_subspaceForTestPromiseRejectionEvent = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestPromiseRejectionEvent);
</del><ins>+        spaces.m_subspaceForTestPromiseRejectionEvent = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestPromiseRejectionEvent);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestPromiseRejectionEvent = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestPromiseRejectionEvent);
</del><ins>+        spaces.m_subspaceForTestPromiseRejectionEvent = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestPromiseRejectionEvent);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestPromiseRejectionEvent.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestReadOnlyMapLikecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlyMapLike.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -305,9 +305,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestReadOnlyMapLike> || !JSTestReadOnlyMapLike::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestReadOnlyMapLike>)
</span><del>-        spaces.m_subspaceForTestReadOnlyMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestReadOnlyMapLike);
</del><ins>+        spaces.m_subspaceForTestReadOnlyMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestReadOnlyMapLike);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestReadOnlyMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestReadOnlyMapLike);
</del><ins>+        spaces.m_subspaceForTestReadOnlyMapLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestReadOnlyMapLike);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestReadOnlyMapLike.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestReadOnlySetLikecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReadOnlySetLike.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -284,9 +284,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestReadOnlySetLike> || !JSTestReadOnlySetLike::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestReadOnlySetLike>)
</span><del>-        spaces.m_subspaceForTestReadOnlySetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestReadOnlySetLike);
</del><ins>+        spaces.m_subspaceForTestReadOnlySetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestReadOnlySetLike);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestReadOnlySetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestReadOnlySetLike);
</del><ins>+        spaces.m_subspaceForTestReadOnlySetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestReadOnlySetLike);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestReadOnlySetLike.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestReportExtraMemoryCostcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestReportExtraMemoryCost.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -171,9 +171,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestReportExtraMemoryCost> || !JSTestReportExtraMemoryCost::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestReportExtraMemoryCost>)
</span><del>-        spaces.m_subspaceForTestReportExtraMemoryCost = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestReportExtraMemoryCost);
</del><ins>+        spaces.m_subspaceForTestReportExtraMemoryCost = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestReportExtraMemoryCost);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestReportExtraMemoryCost = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestReportExtraMemoryCost);
</del><ins>+        spaces.m_subspaceForTestReportExtraMemoryCost = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestReportExtraMemoryCost);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestReportExtraMemoryCost.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestSerializedScriptValueInterfacecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -349,9 +349,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestSerializedScriptValueInterface> || !JSTestSerializedScriptValueInterface::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestSerializedScriptValueInterface>)
</span><del>-        spaces.m_subspaceForTestSerializedScriptValueInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestSerializedScriptValueInterface);
</del><ins>+        spaces.m_subspaceForTestSerializedScriptValueInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestSerializedScriptValueInterface);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestSerializedScriptValueInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestSerializedScriptValueInterface);
</del><ins>+        spaces.m_subspaceForTestSerializedScriptValueInterface = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestSerializedScriptValueInterface);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestSerializedScriptValueInterface.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestSetLikecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLike.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLike.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLike.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -342,9 +342,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestSetLike> || !JSTestSetLike::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestSetLike>)
</span><del>-        spaces.m_subspaceForTestSetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestSetLike);
</del><ins>+        spaces.m_subspaceForTestSetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestSetLike);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestSetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestSetLike);
</del><ins>+        spaces.m_subspaceForTestSetLike = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestSetLike);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestSetLike.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestSetLikeWithOverriddenOperationscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp  2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestSetLikeWithOverriddenOperations.cpp     2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -354,9 +354,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestSetLikeWithOverriddenOperations> || !JSTestSetLikeWithOverriddenOperations::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestSetLikeWithOverriddenOperations>)
</span><del>-        spaces.m_subspaceForTestSetLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestSetLikeWithOverriddenOperations);
</del><ins>+        spaces.m_subspaceForTestSetLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestSetLikeWithOverriddenOperations);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestSetLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestSetLikeWithOverriddenOperations);
</del><ins>+        spaces.m_subspaceForTestSetLikeWithOverriddenOperations = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestSetLikeWithOverriddenOperations);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestSetLikeWithOverriddenOperations.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifiercpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifier.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifier.cpp      2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifier.cpp 2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -192,9 +192,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifier> || !JSTestStringifier::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifier>)
</span><del>-        spaces.m_subspaceForTestStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifier);
</del><ins>+        spaces.m_subspaceForTestStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifier);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifier);
</del><ins>+        spaces.m_subspaceForTestStringifier = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifier);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifier.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierAnonymousOperationcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierAnonymousOperation.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -192,9 +192,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierAnonymousOperation> || !JSTestStringifierAnonymousOperation::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierAnonymousOperation>)
</span><del>-        spaces.m_subspaceForTestStringifierAnonymousOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierAnonymousOperation);
</del><ins>+        spaces.m_subspaceForTestStringifierAnonymousOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierAnonymousOperation);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierAnonymousOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierAnonymousOperation);
</del><ins>+        spaces.m_subspaceForTestStringifierAnonymousOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierAnonymousOperation);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierAnonymousOperation.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierNamedOperationcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierNamedOperation.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -209,9 +209,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierNamedOperation> || !JSTestStringifierNamedOperation::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierNamedOperation>)
</span><del>-        spaces.m_subspaceForTestStringifierNamedOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierNamedOperation);
</del><ins>+        spaces.m_subspaceForTestStringifierNamedOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierNamedOperation);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierNamedOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierNamedOperation);
</del><ins>+        spaces.m_subspaceForTestStringifierNamedOperation = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierNamedOperation);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierNamedOperation.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierOperationImplementedAscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationImplementedAs.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -209,9 +209,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierOperationImplementedAs> || !JSTestStringifierOperationImplementedAs::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierOperationImplementedAs>)
</span><del>-        spaces.m_subspaceForTestStringifierOperationImplementedAs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierOperationImplementedAs);
</del><ins>+        spaces.m_subspaceForTestStringifierOperationImplementedAs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierOperationImplementedAs);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierOperationImplementedAs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierOperationImplementedAs);
</del><ins>+        spaces.m_subspaceForTestStringifierOperationImplementedAs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierOperationImplementedAs);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierOperationImplementedAs.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierOperationNamedToStringcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp        2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierOperationNamedToString.cpp   2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -192,9 +192,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierOperationNamedToString> || !JSTestStringifierOperationNamedToString::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierOperationNamedToString>)
</span><del>-        spaces.m_subspaceForTestStringifierOperationNamedToString = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierOperationNamedToString);
</del><ins>+        spaces.m_subspaceForTestStringifierOperationNamedToString = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierOperationNamedToString);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierOperationNamedToString = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierOperationNamedToString);
</del><ins>+        spaces.m_subspaceForTestStringifierOperationNamedToString = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierOperationNamedToString);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierOperationNamedToString.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierReadOnlyAttributecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp     2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadOnlyAttribute.cpp        2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -208,9 +208,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierReadOnlyAttribute> || !JSTestStringifierReadOnlyAttribute::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierReadOnlyAttribute>)
</span><del>-        spaces.m_subspaceForTestStringifierReadOnlyAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierReadOnlyAttribute);
</del><ins>+        spaces.m_subspaceForTestStringifierReadOnlyAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierReadOnlyAttribute);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierReadOnlyAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierReadOnlyAttribute);
</del><ins>+        spaces.m_subspaceForTestStringifierReadOnlyAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierReadOnlyAttribute);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierReadOnlyAttribute.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestStringifierReadWriteAttributecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestStringifierReadWriteAttribute.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -227,9 +227,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierReadWriteAttribute> || !JSTestStringifierReadWriteAttribute::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestStringifierReadWriteAttribute>)
</span><del>-        spaces.m_subspaceForTestStringifierReadWriteAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestStringifierReadWriteAttribute);
</del><ins>+        spaces.m_subspaceForTestStringifierReadWriteAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestStringifierReadWriteAttribute);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestStringifierReadWriteAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestStringifierReadWriteAttribute);
</del><ins>+        spaces.m_subspaceForTestStringifierReadWriteAttribute = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestStringifierReadWriteAttribute);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestStringifierReadWriteAttribute.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSTestTypedefscpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSTestTypedefs.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSTestTypedefs.cpp 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSTestTypedefs.cpp    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -778,9 +778,9 @@
</span><span class="cx">         return space;
</span><span class="cx">     static_assert(std::is_base_of_v<JSC::JSDestructibleObject, JSTestTypedefs> || !JSTestTypedefs::needsDestruction);
</span><span class="cx">     if constexpr (std::is_base_of_v<JSC::JSDestructibleObject, JSTestTypedefs>)
</span><del>-        spaces.m_subspaceForTestTypedefs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.destructibleObjectHeapCellType.get(), JSTestTypedefs);
</del><ins>+        spaces.m_subspaceForTestTypedefs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.destructibleObjectHeapCellType, JSTestTypedefs);
</ins><span class="cx">     else
</span><del>-        spaces.m_subspaceForTestTypedefs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, vm.cellHeapCellType.get(), JSTestTypedefs);
</del><ins>+        spaces.m_subspaceForTestTypedefs = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *vm.cellHeapCellType, JSTestTypedefs);
</ins><span class="cx">     auto* space = spaces.m_subspaceForTestTypedefs.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSWorkerGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkerGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkerGlobalScope.cpp    2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkerGlobalScope.cpp       2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -249,7 +249,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForWorkerGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSWorkerGlobalScope.get(), JSWorkerGlobalScope);
</del><ins>+    spaces.m_subspaceForWorkerGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSWorkerGlobalScope, JSWorkerGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForWorkerGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebindingsscriptstestJSJSWorkletGlobalScopecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkletGlobalScope.cpp (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkletGlobalScope.cpp   2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bindings/scripts/test/JS/JSWorkletGlobalScope.cpp      2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -163,7 +163,7 @@
</span><span class="cx">     auto& spaces = clientData.subspaces();
</span><span class="cx">     if (auto* space = spaces.m_subspaceForWorkletGlobalScope.get())
</span><span class="cx">         return space;
</span><del>-    spaces.m_subspaceForWorkletGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, clientData.m_heapCellTypeForJSWorkletGlobalScope.get(), JSWorkletGlobalScope);
</del><ins>+    spaces.m_subspaceForWorkletGlobalScope = makeUnique<IsoSubspace> ISO_SUBSPACE_INIT(vm.heap, *clientData.m_heapCellTypeForJSWorkletGlobalScope, JSWorkletGlobalScope);
</ins><span class="cx">     auto* space = spaces.m_subspaceForWorkletGlobalScope.get();
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("unreachable-code")
</span><span class="cx"> IGNORE_WARNINGS_BEGIN("tautological-compare")
</span></span></pre></div>
<a id="trunkSourceWebCorebridgeobjcobjc_runtimemm"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/bridge/objc/objc_runtime.mm (286041 => 286042)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/bridge/objc/objc_runtime.mm 2021-11-19 01:35:35 UTC (rev 286041)
+++ trunk/Source/WebCore/bridge/objc/objc_runtime.mm    2021-11-19 03:03:45 UTC (rev 286042)
</span><span class="lines">@@ -1,5 +1,5 @@
</span><span class="cx"> /*
</span><del>- * Copyright (C) 2004-2019 Apple Inc. All rights reserved.
</del><ins>+ * Copyright (C) 2004-2021 Apple Inc. All rights reserved.
</ins><span class="cx">  *
</span><span class="cx">  * Redistribution and use in source and binary forms, with or without
</span><span class="cx">  * modification, are permitted provided that the following conditions
</span><span class="lines">@@ -334,7 +334,9 @@
</span><span class="cx"> 
</span><span class="cx"> JSC::IsoSubspace* ObjcFallbackObjectImp::subspaceForImpl(JSC::VM& vm)
</span><span class="cx"> {
</span><del>-    static NeverDestroyed<JSC::IsoSubspacePerVM> perVM([] (JSC::VM& vm) { return ISO_SUBSPACE_PARAMETERS(vm.destructibleObjectHeapCellType.get(), ObjcFallbackObjectImp); });
</del><ins>+    static NeverDestroyed<JSC::IsoSubspacePerVM> perVM([] (JSC::VM& vm) {
+        return ISO_SUBSPACE_PARAMETERS(*vm.destructibleObjectHeapCellType, ObjcFallbackObjectImp);
+    });
</ins><span class="cx">     return &perVM.get().forVM(vm);
</span><span class="cx"> }
</span><span class="cx"> 
</span></span></pre>
</div>
</div>

</body>
</html>