[webkit-reviews] review granted: [Bug 226146] [JSC] Add JIT ICs for `#x in obj` feature : [Attachment 431734] Patch

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 21 18:51:26 PDT 2021

Saam Barati <sbarati at apple.com> has granted Ross Kirsling
<ross.kirsling at sony.com>'s request for review:
Bug 226146: [JSC] Add JIT ICs for `#x in obj` feature

Attachment 431734: Patch


--- Comment #10 from Saam Barati <sbarati at apple.com> ---
Comment on attachment 431734
  --> https://bugs.webkit.org/attachment.cgi?id=431734

View in context: https://bugs.webkit.org/attachment.cgi?id=431734&action=review

Nice. r=me

> Source/JavaScriptCore/jit/Repatch.cpp:1083
> +	   InlineCacheAction action = actionForCell(vm, base);

Do we care about Structure::propertyAccessesAreCacheable for has private brand

I also wonder if we care about uncacheable dictionary. It looks like
setPrivateBrand will always transition.

Not sure if we really care about those cases or not.

My hunch is: we don't care about Structure::propertyAccessesAreCacheable, but
we probably shouldn't rely on UncacheableDictionary not transitioning. That
said, I don't see in our current implementation how we could do it without
always transitioning given that we rely on the m_parentBrand pointer.

More information about the webkit-reviews mailing list