[Webkit-unassigned] [Bug 163171] B3 should efficiently emit great code for WebAssembly property accesses and bounds checks

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 11 17:16:14 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=163171

--- Comment #2 from Keith Miller <keith_miller at apple.com> ---
I think your strategy does not work with the design of wasm. You cannot sink WasmBoundsCheck(Add(ptr, const), gpr, offset) to WasmBoundsCheck(ptr, gpr, offset - const) because that would change the trapping semantics of the language. For example if the user wrote the following wasm:

ptr = i32.Add(p, 2024)
i32.Load(ptr)

if p = 0 - 1024 then this code should not trap but if we sunk that addition into the guard page size we would trap since the pointer would appear to be out of bounds.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161012/e576f9fe/attachment.html>


More information about the webkit-unassigned mailing list