Changeset 207211 in webkit
- Timestamp:
- Oct 12, 2016 1:41:54 AM (8 years ago)
- Location:
- branches/safari-602-branch/Source/JavaScriptCore
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/safari-602-branch/Source/JavaScriptCore/ChangeLog
r207210 r207211 1 2016-10-12 Matthew Hanson <matthew_hanson@apple.com> 2 3 Merge r206955. rdar://problem/28216236 4 5 2016-10-08 Saam Barati <sbarati@apple.com> 6 7 HasIndexedProperty clobberize rule is wrong for Array::ForceOSRExit 8 https://bugs.webkit.org/show_bug.cgi?id=159942 9 <rdar://problem/27328836> 10 11 Reviewed by Filip Pizlo. 12 13 When HasIndexedProperty has a ForceOSRExit array mode, it should 14 report to write to side state, like the ForceOSRExit node, and the 15 other nodes with ForceOSRExit array mode. 16 17 * dfg/DFGClobberize.h: 18 (JSC::DFG::clobberize): 19 1 20 2016-10-12 Matthew Hanson <matthew_hanson@apple.com> 2 21 -
branches/safari-602-branch/Source/JavaScriptCore/dfg/DFGClobberize.h
r203336 r207211 237 237 ArrayMode mode = node->arrayMode(); 238 238 switch (mode.type()) { 239 case Array::ForceExit: { 240 write(SideState); 241 return; 242 } 239 243 case Array::Int32: { 240 244 if (mode.isInBounds()) {
Note: See TracChangeset
for help on using the changeset viewer.