[webkit-reviews] review granted: [Bug 69716] DFG should not always speculate that a ByVal access has an integer index : [Attachment 110295] the patch - another attempt to make stylebot happy

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Oct 9 10:13:56 PDT 2011


Oliver Hunt <oliver at apple.com> has granted Filip Pizlo <fpizlo at apple.com>'s
request for review:
Bug 69716: DFG should not always speculate that a ByVal access has an integer
index
https://bugs.webkit.org/show_bug.cgi?id=69716

Attachment 110295: the patch - another attempt to make stylebot happy
https://bugs.webkit.org/attachment.cgi?id=110295&action=review

------- Additional Comments from Oliver Hunt <oliver at apple.com>
View in context: https://bugs.webkit.org/attachment.cgi?id=110295&action=review


r=me, but update those comments

> Source/JavaScriptCore/dfg/DFGPropagator.cpp:1025
> +		       // PutByVal currently always speculates that it's
accessing an array with an
> +		       // integer index, which means that it's impossible for
it to cause a structure
> +		       // change.

This comment should be updated to indicate this only applies when integer
properties are being accessed

> Source/JavaScriptCore/dfg/DFGPropagator.cpp:1093
> +		       // PutByVal currently always speculates that it's
accessing an array with an
> +		       // integer index, which means that it's impossible for
it to cause a structure
> +		       // change.

as above

> Source/JavaScriptCore/dfg/DFGPropagator.cpp:1136
> +		       // PutByVal currently always speculates that it's
accessing an array with an
> +		       // integer index, which means that it's impossible for
it to cause a structure
> +		       // change.

ditto

> Source/JavaScriptCore/dfg/DFGPropagator.cpp:1172
> +		       // PutByVal currently always speculates that it's
accessing an array with an
> +		       // integer index, which means that it's impossible for
it to cause a structure
> +		       // change.

ditto


More information about the webkit-reviews mailing list