[Webkit-unassigned] [Bug 76768] DFG should not have code that directly decodes the states of old JIT inline cache data structures

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=76768


Sam Weinig <sam at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #123431|review?                     |review+
               Flag|                            |




--- Comment #4 from Sam Weinig <sam at webkit.org>  2012-01-20 21:30:25 PST ---
(From update of attachment 123431)
View in context: https://bugs.webkit.org/attachment.cgi?id=123431&action=review

> Source/JavaScriptCore/bytecode/PutByIdStatus.h:44
> +        NoInformation,
> +        SimpleReplace,
> +        SimpleTransition,
> +        TakesSlowPath

Feed me comments like my brother!

> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:-1879
> -            if (stubInfo.seen
> -                && !m_inlineStackTop->m_profiledBlock->likelyToTakeSlowCase(m_currentIndex)
> -                && !m_inlineStackTop->m_exitProfile.hasExitSite(m_currentIndex, BadCache)) {

You said this is a bugish thingy.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.