[Webkit-unassigned] [Bug 219297] [WASM-References] Add table.init

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Dec 9 02:57:45 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=219297

--- Comment #10 from Dmitry <dbezhetskov at igalia.com> ---
Comment on attachment 415626
  --> https://bugs.webkit.org/attachment.cgi?id=415626
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=415626&action=review

>> Source/JavaScriptCore/wasm/WasmAirIRGenerator.cpp:1163
>> +    return { };
> 
> Do we need exception check here? Looks like elem_drop instruction never returns false.

Ah, thanks, fixed!

>> Source/JavaScriptCore/wasm/WasmInstance.cpp:168
>> +const Element* Instance::elem(unsigned i) const
> 
> Let's name it `elementAt`.

renamed

>> Source/JavaScriptCore/wasm/WasmOperations.cpp:724
>> +JSC_DEFINE_JIT_OPERATION(operationWasmElemDrop, bool, (Instance* instance, unsigned elementIndex))
> 
> Let's make return type "void" since it always returns "true".

Done

>> Source/JavaScriptCore/wasm/wasm.json:73
>> +        "elem.drop":           { "category": "exttable",   "value":  252, "return": ["i32"],                         "parameter": [],                             "immediate": [{"name": "element_index",  "type": "varuint32"}],                                             "description": "prevents further use of a passive element segment", "extendedOp": 13 },
> 
> Ditto for elem.drop. And can you check the other table instructions too?

Yeah, I noticed that too when I looked at table.fill, copied code and forgot about it :)
Fixed table.copy, elem.drop and table.fill.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201209/34a1740d/attachment.htm>


More information about the webkit-unassigned mailing list