Changeset 227435 in webkit
- Timestamp:
- Jan 23, 2018 12:49:26 PM (6 years ago)
- Location:
- trunk/Source/JavaScriptCore
- Files:
-
- 5 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/Source/JavaScriptCore/ChangeLog
r227434 r227435 1 2018-01-23 Robin Morisset <rmorisset@apple.com> 2 3 Rollout r219636 4 https://bugs.webkit.org/show_bug.cgi?id=181997 5 <rdar://problem/35883022> 6 7 Unreviewed, as it is a rollout. 8 9 * dfg/DFGSpeculativeJIT.cpp: 10 (JSC::DFG::SpeculativeJIT::emitAllocateRawObject): 11 * runtime/JSArray.cpp: 12 (JSC::JSArray::tryCreateUninitializedRestricted): 13 * runtime/JSArray.h: 14 (JSC::JSArray::tryCreate): 15 * runtime/JSObject.cpp: 16 (JSC::JSObject::ensureLengthSlow): 17 1 18 2018-01-23 Mark Lam <mark.lam@apple.com> 2 19 -
trunk/Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp
r227434 r227435 145 145 structure, vectorLength)); 146 146 147 if (numElements < vectorLength && LIKELY(!hasUndecided(structure->indexingType()))) {147 if (numElements < vectorLength) { 148 148 #if USE(JSVALUE64) 149 149 if (hasDouble(structure->indexingType())) -
trunk/Source/JavaScriptCore/runtime/JSArray.cpp
r226416 r227435 92 92 for (; i < vectorLength; ++i) 93 93 butterfly->contiguousDouble().at(std::numeric_limits<uint32_t>::max(), i) = PNaN; 94 } else if (LIKELY(!hasUndecided(indexingType))){94 } else { 95 95 for (; i < vectorLength; ++i) 96 96 butterfly->contiguous().at(std::numeric_limits<uint32_t>::max(), i).clear(); -
trunk/Source/JavaScriptCore/runtime/JSArray.h
r225314 r227435 248 248 if (hasDouble(indexingType)) 249 249 clearArray(butterfly->contiguousDouble().data(), vectorLength); 250 else if (LIKELY(!hasUndecided(indexingType)))250 else 251 251 clearArray(butterfly->contiguous().data(), vectorLength); 252 252 } else { -
trunk/Source/JavaScriptCore/runtime/JSObject.cpp
r226416 r227435 3223 3223 for (unsigned i = oldVectorLength; i < newVectorLength; ++i) 3224 3224 butterfly->indexingPayload<double>()[i] = PNaN; 3225 } else if (LIKELY(!hasUndecided(indexingType()))){3225 } else { 3226 3226 for (unsigned i = oldVectorLength; i < newVectorLength; ++i) 3227 3227 butterfly->indexingPayload<WriteBarrier<Unknown>>()[i].clear();
Note: See TracChangeset
for help on using the changeset viewer.