[Webkit-unassigned] [Bug 68932] New: DFG JIT should speculate more aggressively on reads of array.length

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=68932

           Summary: DFG JIT should speculate more aggressively on reads of
                    array.length
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fpizlo at apple.com


DFG JIT currently optimizes accesses to array.length the same way as the old JIT: it generates a stub on the fly when an array length access is detected after the code is already compiled.  But the DFG has all the information it needs to inline a fast speculative array length access.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.