[Webkit-unassigned] [Bug 230241] Fix crash in 32 bits due to not enough scratch registers available

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 14 06:24:35 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=230241

Caio Lima <ticaiolima at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ticaiolima at gmail.com
 Attachment #438093|review?                     |review-
              Flags|                            |

--- Comment #5 from Caio Lima <ticaiolima at gmail.com> ---
Comment on attachment 438093
  --> https://bugs.webkit.org/attachment.cgi?id=438093
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=438093&action=review

> Source/JavaScriptCore/bytecode/AccessCase.cpp:2327
> +                slowPath.append(jit.jump());

I’m not comfortable with this generating a bunch of IC code for checks and other things to always jump to slow path. This seems quite suboptimal. Isn’t there a way were we skip a case if we figure out we don’t have enough registers for it? Skipping such case will result in always taking the slow path as well, but we don’t emit any unnecessary code for it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210914/8d8e8513/attachment-0001.htm>


More information about the webkit-unassigned mailing list