[Webkit-unassigned] [Bug 143974] New: PhantomNewObject should be marked NodeMustGenerate

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=143974

            Bug ID: 143974
           Summary: PhantomNewObject should be marked NodeMustGenerate
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: basile_clement at apple.com

The allocation sinking optimization pass creates PhantomNewObject nodes to keep track of the old NewObject nodes, which must be kept as they are used to restore the state of allocations on OSR exit, and thus should be marked NodeMustGenerate.

They are currently prevented from being removed by the PutHint for the object's structure, but that is a rather implicit safety net.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150421/039c224d/attachment.html>