[Webkit-unassigned] [Bug 174352] New: [FTL] Arguments elimination is suppressed by unreachable blocks

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=174352

            Bug ID: 174352
           Summary: [FTL] Arguments elimination is suppressed by
                    unreachable blocks
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: utatane.tea at gmail.com

I can see the case like this,


1: CreateClonedArguments

...

10: ForceOSRExit
11: GetById(@1, "length")

In that case, even if 11 is not reachable from FTL code, our arguments elimination phase is suppressed by this, because our DFG constant folding's DFG node clipping is not executed yet.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170711/3c718dd3/attachment-0001.html>