[webkit-dev] [squirrelfish] [webkit-help] Optimize Property Access failed

talking1239 at gmail.com talking1239 at gmail.com
Wed Aug 8 20:38:48 PDT 2012

My webkkit version 60***** and many custom features are verified, so it is hard to update it. But after check the Changlog, i find that GC is related with JIT Infrastructure and ARCH code.

BGs/Felix Shi

At 2012-08-09 07:36:16,"Filip Pizlo" <fpizlo at apple.com> wrote:

The existence of the enable flag you mention implies that you have an ancient version of WebKit. Please consider updating. 


On Aug 7, 2012, at 11:39 PM, talking1239 at gmail.com wrote:

I enable ENABLE_JIT_OPTIMIZE_PROPERTY_ACCESS feature and find that it will crash when go back the home page after run follow test case, I think it is caused by the optimize propery access, so anyone know that it is caused by the arch related code or jit Infrastructure code? and if i disable   ENABLE_JIT_OPTIMIZE_PROPERTY_ACCESS feature, it will run correctly.

Any help explaining this would be much appreciated!

test case:
var Origin = new Object();

function Init() {
  Origin.V = [150]

for ( var i = 20; i <= 160; i *= 2 ) {
Origin = null;


JAVASCRIPTCORE!const JSC::JSArray::`vftable' + 2 bytes

JAVASCRIPTCORE!JSC::Heap::sweep()  line 1104 + 14 bytes

JAVASCRIPTCORE!JSC::Heap::collectAllGarbage()  line 1306

WEBKIT!WebCore::collect(void * 0x00000000)  line 47

WEBKIT!WebCore::GCController::gcTimerFired(WebCore::Timer<WebCore::GCController> * 0x06a905a0 {m_object=??? m_function=??? })  line 70

WEBKIT!WebCore::Timer<WebCore::PageCache>::fired()  line 98 + 20 bytes

WEBKIT!WebCore::ThreadTimers::sharedTimerFiredInternal()  line 115

WEBKIT!WebCore::ThreadTimers::sharedTimerFired()  line 91


BGs/Felix Shi

webkit-dev mailing list
webkit-dev at lists.webkit.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-dev/attachments/20120809/0394c933/attachment.html>

More information about the webkit-dev mailing list