[Webkit-unassigned] [Bug 72312] New: DFG code blocks that have speculation checks on objects should refer to those objects weakly

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=72312

           Summary: DFG code blocks that have speculation checks on
                    objects should refer to those objects weakly
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fpizlo at apple.com
            Blocks: 72311


If the DFG performs optimizations on things like get_by_id or call inlining, it will generate code that refers to objects that the source code did not have strong references to.  Instead, the references should be weak, so that if those objects are otherwise dead, the DFG's code does not keep them alive longer than necessary.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.