[Webkit-unassigned] [Bug 72709] DFG JIT fails speculation on InstanceOf if the base is not an object

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=72709


Filip Pizlo <fpizlo at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #115779|                            |review?
               Flag|                            |




--- Comment #2 from Filip Pizlo <fpizlo at apple.com>  2011-11-18 03:31:45 PST ---
Created an attachment (id=115779)
 --> (https://bugs.webkit.org/attachment.cgi?id=115779&action=review)
the patch

Seems like a 1% win on V8 using the V8 harness:



[pizlo at nitroflex benchmarks] /Volumes/Data/pizlo/quinary/OpenSource/WebKitBuild/Release/jsc run.js 
Richards: 10855
DeltaBlue: 7207
Crypto: 16171
RayTrace: 9333
EarleyBoyer: 10527
RegExp: 2252
Splay: 8964
----
Score (version 6): 8207
[pizlo at nitroflex benchmarks] /Volumes/Data/pizlo/senary/OpenSource/WebKitBuild/Release/jsc run.js 
Richards: 10862
DeltaBlue: 7247
Crypto: 16377
RayTrace: 9268
EarleyBoyer: 10851
RegExp: 2270
Splay: 8997
----
Score (version 6): 8271
[pizlo at nitroflex benchmarks] irb
>> 8271/8207.0
=> 1.00779822103083
>> quit
[pizlo at nitroflex benchmarks] irb
>> 10851/10527.0
=> 1.03077799943004
>> quit


Seems neutral according to my harness, running on 3 different machines.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.