[Webkit-unassigned] [Bug 97088] New: DFG should no assume that a ByVal access is generic just because it was unprofiled

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=97088

           Summary: DFG should no assume that a ByVal access is generic
                    just because it was unprofiled
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fpizlo at apple.com


This is a rare situation, but we may have a ByVal access where:

1) Value profiling has live information for the operands to the ByVal access, because for each operand there is at least one executed operation that has a data flow arc to the operand.

2) Array profiling has no live profiling, because it never executed.

3) The ByVal access was to some manner of array storage.

In that case, we currently assume Generic rather than using ForceExit.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.