[Webkit-unassigned] [Bug 69174] New: DFG JIT, Branch on integer can always be a 32-bit compare.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Sep 30 15:14:24 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=69174
Summary: DFG JIT, Branch on integer can always be a 32-bit
compare.
Product: WebKit
Version: 528+ (Nightly build)
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: barraclough at apple.com
if (shouldSpeculateInteger(node.child1()) && !isStrictInt32(node.child1())), the JSVALUE64 JIT will currently compare all 64bits in the register, but in these cases the DataFormat is always a JS boxed integer. In these cases we can just compare the low 32bits anyway - no need to check the tag. This allows the code to be unified with the JSVALUE32_64 JIT.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list