[Webkit-unassigned] [Bug 160925] New: Remove invalid assertion in the DFG backend's GetById emitter.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=160925

            Bug ID: 160925
           Summary: Remove invalid assertion in the DFG backend's GetById
                    emitter.
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mark.lam at apple.com

The DFG bytecode parser will force an OSR exit if it sees an op_get_by_id or op_get_by_val with a SpecNone prediction.  Hence, it is safe to emit code for the GetById node even if its prediction is SpecNone.  The GetById node may still be seen by the DFG backend, but it is valid for it to have a SpecNone prediction.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160817/6807a36c/attachment.html>