[Webkit-unassigned] [Bug 20356] Dynamic function/type specialisation

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20356





------- Comment #1 from oliver at apple.com  2008-08-11 21:56 PDT -------
Created an attachment (id=22741)
 --> (https://bugs.webkit.org/attachment.cgi?id=22741&action=view)
initial specialisation patch

Here's an initial version of this patch.  Current problems:
 * I'm fairly sure it's not gc-safe (it stores the JSFunction* for functions it
specialises in the opcode stream, which could be gc'd, then that address could
be reallocated with a different object which could in certain circumstances
result in badness)
 * It's not 64bit safe -- it stores the JSFunction* in a single operand in te
intstruction stream.
 * Some of the code is heonously ugly, especially the bits where functions
specialise themselves.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.