Changeset 291752 in webkit

Timestamp:

Mar 23, 2022, 10:58:27 AM (5 years ago)

Author:

ysuzuki@apple.com

Message:

Unreviewed, fix DataIC's slowPathJump handling
​https://bugs.webkit.org/show_bug.cgi?id=231224

• dfg/DFGSpeculativeJIT.cpp:

(JSC::DFG::SpeculativeJIT::compileInById):

Location:

trunk/Source/JavaScriptCore

Files:

• ChangeLog (modified) (1 diff)
• dfg/DFGSpeculativeJIT.cpp (modified) (2 diffs)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2022-03-23  Yusuke Suzuki  <ysuzuki@apple.com>
+
+        Unreviewed, fix DataIC's slowPathJump handling
+        https://bugs.webkit.org/show_bug.cgi?id=231224
+
+        * dfg/DFGSpeculativeJIT.cpp:
+        (JSC::DFG::SpeculativeJIT::compileInById):
+
 2022-03-23  Patrick Angle  <pangle@apple.com>
 

trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp

@@ -1366 +1366 @@
 
     JITCompiler::JumpList slowCases;
-    slowCases.append(gen.slowPathJump());
+    if (!JITCode::useDataIC(JITType::DFGJIT))
+        slowCases.append(gen.slowPathJump());
 
     std::unique_ptr<SlowPathGenerator> slowPath;
@@ -15848 +15849 @@
     if (slowPathTarget.isSet())
         slowCases.append(slowPathTarget);
-    slowCases.append(gen.slowPathJump());
+    if (!JITCode::useDataIC(JITType::DFGJIT))
+        slowCases.append(gen.slowPathJump());
 
     std::unique_ptr<SlowPathGenerator> slowPath;