[Webkit-unassigned] [Bug 128352] ReallocatePropertyStorage in FTL
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Feb 7 15:18:38 PST 2014
https://bugs.webkit.org/show_bug.cgi?id=128352
Filip Pizlo <fpizlo at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #223487|review?, commit-queue? |review-, commit-queue-
Flag| |
--- Comment #2 from Filip Pizlo <fpizlo at apple.com> 2014-02-07 15:15:57 PST ---
(From update of attachment 223487)
View in context: https://bugs.webkit.org/attachment.cgi?id=223487&action=review
> Source/JavaScriptCore/ftl/FTLLowerDFGToLLVM.cpp:2666
> + LBasicBlock failPath = FTL_NEW_BLOCK(m_out, ("ReallocatePropertyStorage failure"));
You don't need a crashing slow path here.
> Source/JavaScriptCore/ftl/FTLLowerDFGToLLVM.cpp:2710
> + m_out.loadPtr(m_out.address(m_heaps.properties.atAnyNumber(), oldStorage, offset ));
I think it's better to use the style of access that GetByOffset uses. Ideally this would be like a look the repeatedly does something simar to an out-of-line GetByOffset followed by PutByOffset. The benefit is that this way you wouldn't be claiming to clobber the entire property storage abstract heap. Basically I want to see properties[number] rather than atAnyNunber. I know I suggested atAnyNumber previously but I was wrong.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list