[Webkit-unassigned] [Bug 199968] New: [JSC] Allow GC after lowering to B3

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 19 15:36:05 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=199968

            Bug ID: 199968
           Summary: [JSC] Allow GC after lowering to B3
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ysuzuki at apple.com

This is rough idea, I'm not sure whether it is already done, or it is possible.
After lowering to B3, we do not have access to JS heap. And all the cell pointers must be collected in lowering phase by `freeze`.
So, the idea is that, while optimizing things in B3, we are safe to be stopped at arbitrary time for GC.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190719/74b79501/attachment-0001.html>


More information about the webkit-unassigned mailing list