<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>181991</bug_id>
          
          <creation_ts>2018-01-23 10:09:59 -0800</creation_ts>
          <short_desc>JSC should use a speculation fence on VM entry/exit</short_desc>
          <delta_ts>2018-01-23 12:50:47 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Filip Pizlo">fpizlo</reporter>
          <assigned_to name="Filip Pizlo">fpizlo</assigned_to>
          <cc>benjamin</cc>
    
    <cc>cdumez</cc>
    
    <cc>cmarcelo</cc>
    
    <cc>dbates</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>jfbastien</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>pvollan</cc>
    
    <cc>saam</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1392103</commentid>
    <comment_count>0</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2018-01-23 10:09:59 -0800</bug_when>
    <thetext>Patch forthcoming.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392104</commentid>
    <comment_count>1</comment_count>
      <attachid>332035</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2018-01-23 10:12:04 -0800</bug_when>
    <thetext>Created attachment 332035
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392105</commentid>
    <comment_count>2</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2018-01-23 10:12:11 -0800</bug_when>
    <thetext>&lt;rdar://problem/36304751&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392106</commentid>
    <comment_count>3</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-01-23 10:12:48 -0800</bug_when>
    <thetext>&lt;rdar://problem/36781062&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392107</commentid>
    <comment_count>4</comment_count>
      <attachid>332035</attachid>
    <who name="JF Bastien">jfbastien</who>
    <bug_when>2018-01-23 10:16:46 -0800</bug_when>
    <thetext>Comment on attachment 332035
the patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392109</commentid>
    <comment_count>5</comment_count>
      <attachid>332035</attachid>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2018-01-23 10:17:21 -0800</bug_when>
    <thetext>Comment on attachment 332035
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=332035&amp;action=review

&gt; Source/JavaScriptCore/ChangeLog:10
&gt; +        For a microbenchmark that just calls a native function (supplied via a Objective-C block) in a

/a Objective-C/an Objective-C/.

&gt; Source/JavaScriptCore/ChangeLog:11
&gt; +        tight loop from JS is a 0% regression on x86 and a 11% regression on ARM64.

I suggest /JS is a 0%/JS, performance shows a 0%/.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392115</commentid>
    <comment_count>6</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2018-01-23 10:30:13 -0800</bug_when>
    <thetext>Landed in https://trac.webkit.org/changeset/227424/webkit</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392205</commentid>
    <comment_count>7</comment_count>
      <attachid>332035</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2018-01-23 12:39:24 -0800</bug_when>
    <thetext>Comment on attachment 332035
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=332035&amp;action=review

&gt; Source/WTF/wtf/Atomics.h:285
&gt; +#if !OS(WINDOWS)

Should we have someone who works on Windows implement this for them?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1392210</commentid>
    <comment_count>8</comment_count>
      <attachid>332035</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2018-01-23 12:42:31 -0800</bug_when>
    <thetext>Comment on attachment 332035
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=332035&amp;action=review

&gt; Source/JavaScriptCore/runtime/JSLock.cpp:126
&gt; +    WTF::speculationFence();

Do we not want this for entry/exit in and out of other native code. E.g, WebCore bindings?</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>332035</attachid>
            <date>2018-01-23 10:12:04 -0800</date>
            <delta_ts>2018-01-23 10:16:46 -0800</delta_ts>
            <desc>the patch</desc>
            <filename>blah.patch</filename>
            <type>text/plain</type>
            <size>3763</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjI3NDIyKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE5IEBA
CisyMDE4LTAxLTIzICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAg
SlNDIHNob3VsZCB1c2UgYSBzcGVjdWxhdGlvbiBmZW5jZSBvbiBWTSBlbnRyeS9leGl0CisgICAg
ICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xODE5OTEKKworICAg
ICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKyAgICAgICAgCisgICAgICAgIFRoaXMg
YWRkcyBhIFdURjo6c3BlY3VsYXRpb25GZW5jZSBvbiBWTSBlbnRyeSBhbmQgZXhpdC4KKyAgICAg
ICAgCisgICAgICAgIEZvciBhIG1pY3JvYmVuY2htYXJrIHRoYXQganVzdCBjYWxscyBhIG5hdGl2
ZSBmdW5jdGlvbiAoc3VwcGxpZWQgdmlhIGEgT2JqZWN0aXZlLUMgYmxvY2spIGluIGEKKyAgICAg
ICAgdGlnaHQgbG9vcCBmcm9tIEpTIGlzIGEgMCUgcmVncmVzc2lvbiBvbiB4ODYgYW5kIGEgMTEl
IHJlZ3Jlc3Npb24gb24gQVJNNjQuCisgICAgICAgIAorICAgICAgICAqIHJ1bnRpbWUvSlNMb2Nr
LmNwcDoKKyAgICAgICAgKEpTQzo6SlNMb2NrOjpkaWRBY3F1aXJlTG9jayk6CisgICAgICAgIChK
U0M6OkpTTG9jazo6d2lsbFJlbGVhc2VMb2NrKToKKwogMjAxOC0wMS0yMyAgWXVzdWtlIFN1enVr
aSAgPHV0YXRhbmUudGVhQGdtYWlsLmNvbT4KIAogICAgICAgICBbSlNDXSBKSVQgcmVxdWlyZXMg
c2l6ZW9mKGJvb2wpID09IDEKSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9ydW50aW1lL0pT
TG9jay5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvSlNM
b2NrLmNwcAkocmV2aXNpb24gMjI3NDE1KQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRp
bWUvSlNMb2NrLmNwcAkod29ya2luZyBjb3B5KQpAQCAtMTIzLDYgKzEyMyw4IEBAIHZvaWQgSlNM
b2NrOjpsb2NrKGludHB0cl90IGxvY2tDb3VudCkKIAogdm9pZCBKU0xvY2s6OmRpZEFjcXVpcmVM
b2NrKCkKIHsKKyAgICBXVEY6OnNwZWN1bGF0aW9uRmVuY2UoKTsKKyAgICAKICAgICAvLyBGSVhN
RTogV2hhdCBzaG91bGQgaGFwcGVuIHRvIHRoZSBwZXItdGhyZWFkIGlkZW50aWZpZXIgdGFibGUg
aWYgd2UgZG9uJ3QgaGF2ZSBhIFZNPwogICAgIGlmICghbV92bSkKICAgICAgICAgcmV0dXJuOwpA
QCAtMTkxLDYgKzE5Myw4IEBAIHZvaWQgSlNMb2NrOjp1bmxvY2soaW50cHRyX3QgdW5sb2NrQ291
bnQKIAogdm9pZCBKU0xvY2s6OndpbGxSZWxlYXNlTG9jaygpCiB7CisgICAgV1RGOjpzcGVjdWxh
dGlvbkZlbmNlKCk7CisgICAgCiAgICAgUmVmUHRyPFZNPiB2bSA9IG1fdm07CiAgICAgaWYgKHZt
KSB7CiAgICAgICAgIHZtLT5kcmFpbk1pY3JvdGFza3MoKTsKSW5kZXg6IFNvdXJjZS9XVEYvQ2hh
bmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XVEYvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMjc0
MTUpCisrKyBTb3VyY2UvV1RGL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3
IEBACisyMDE4LTAxLTIzICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAg
ICAgSlNDIHNob3VsZCB1c2UgYSBzcGVjdWxhdGlvbiBmZW5jZSBvbiBWTSBlbnRyeS9leGl0Cisg
ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xODE5OTEKKwor
ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKyAgICAgICAgCisgICAgICAgIElt
cGxlbWVudCBzcGVjdWxhdGlvbkZlbmNlIGFzIGxmZW5jZSBvbiB4ODYgYW5kIGlzYiBvbiBBUk02
NC4gSSdtIG5vdCBzdXJlIGlmIGlzYiBpcworICAgICAgICBhcHByb3ByaWF0ZSBmb3IgYWxsIEFS
TTY0J3MuCisKKyAgICAgICAgKiB3dGYvQXRvbWljcy5oOgorICAgICAgICAoV1RGOjpzcGVjdWxh
dGlvbkZlbmNlKToKKyAgICAgICAgKFdURjo6eDg2X2xmZW5jZSk6CisKIDIwMTgtMDEtMjIgIEFs
ZXggQ2hyaXN0ZW5zZW4gIDxhY2hyaXN0ZW5zZW5Ad2Via2l0Lm9yZz4KIAogICAgICAgICBCZWdp
biByZW1vdmluZyBRVEtpdCBjb2RlCkluZGV4OiBTb3VyY2UvV1RGL3d0Zi9BdG9taWNzLmgKPT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PQotLS0gU291cmNlL1dURi93dGYvQXRvbWljcy5oCShyZXZpc2lvbiAyMjc0MTUpCisr
KyBTb3VyY2UvV1RGL3d0Zi9BdG9taWNzLmgJKHdvcmtpbmcgY29weSkKQEAgLTI3Niw5ICsyNzYs
MTcgQEAgaW5saW5lIHZvaWQgc3RvcmVTdG9yZUZlbmNlKCkgeyBhcm1fZG1iXwogaW5saW5lIHZv
aWQgbWVtb3J5QmFycmllckFmdGVyTG9jaygpIHsgYXJtX2RtYigpOyB9CiBpbmxpbmUgdm9pZCBt
ZW1vcnlCYXJyaWVyQmVmb3JlVW5sb2NrKCkgeyBhcm1fZG1iKCk7IH0KIGlubGluZSB2b2lkIGNy
b3NzTW9kaWZ5aW5nQ29kZUZlbmNlKCkgeyBhcm1faXNiKCk7IH0KK2lubGluZSB2b2lkIHNwZWN1
bGF0aW9uRmVuY2UoKSB7IGFybV9pc2IoKTsgfQogCiAjZWxpZiBDUFUoWDg2KSB8fCBDUFUoWDg2
XzY0KQogCitpbmxpbmUgdm9pZCB4ODZfbGZlbmNlKCkKK3sKKyNpZiAhT1MoV0lORE9XUykKKyAg
ICBhc20gdm9sYXRpbGUoImxmZW5jZSIgOjo6ICJtZW1vcnkiKTsKKyNlbmRpZgorfQorCiBpbmxp
bmUgdm9pZCB4ODZfb3J0b3AoKQogewogI2lmIE9TKFdJTkRPV1MpCkBAIC0zMjYsNiArMzM0LDcg
QEAgaW5saW5lIHZvaWQgc3RvcmVTdG9yZUZlbmNlKCkgeyBjb21waWxlcgogaW5saW5lIHZvaWQg
bWVtb3J5QmFycmllckFmdGVyTG9jaygpIHsgY29tcGlsZXJGZW5jZSgpOyB9CiBpbmxpbmUgdm9p
ZCBtZW1vcnlCYXJyaWVyQmVmb3JlVW5sb2NrKCkgeyBjb21waWxlckZlbmNlKCk7IH0KIGlubGlu
ZSB2b2lkIGNyb3NzTW9kaWZ5aW5nQ29kZUZlbmNlKCkgeyB4ODZfY3B1aWQoKTsgfQoraW5saW5l
IHZvaWQgc3BlY3VsYXRpb25GZW5jZSgpIHsgeDg2X2xmZW5jZSgpOyB9CiAKICNlbHNlCiAKQEAg
LTMzNiw2ICszNDUsNyBAQCBpbmxpbmUgdm9pZCBzdG9yZVN0b3JlRmVuY2UoKSB7IHN0ZDo6YXRv
CiBpbmxpbmUgdm9pZCBtZW1vcnlCYXJyaWVyQWZ0ZXJMb2NrKCkgeyBzdGQ6OmF0b21pY190aHJl
YWRfZmVuY2Uoc3RkOjptZW1vcnlfb3JkZXJfc2VxX2NzdCk7IH0KIGlubGluZSB2b2lkIG1lbW9y
eUJhcnJpZXJCZWZvcmVVbmxvY2soKSB7IHN0ZDo6YXRvbWljX3RocmVhZF9mZW5jZShzdGQ6Om1l
bW9yeV9vcmRlcl9zZXFfY3N0KTsgfQogaW5saW5lIHZvaWQgY3Jvc3NNb2RpZnlpbmdDb2RlRmVu
Y2UoKSB7IHN0ZDo6YXRvbWljX3RocmVhZF9mZW5jZShzdGQ6Om1lbW9yeV9vcmRlcl9zZXFfY3N0
KTsgfSAvLyBQcm9iYWJseSBub3Qgc3Ryb25nIGVub3VnaC4KK2lubGluZSB2b2lkIHNwZWN1bGF0
aW9uRmVuY2UoKSB7IH0gLy8gUHJvYmFibHkgbm90IHN0cm9uZyBlbm91Z2guCiAKICNlbmRpZgog
Cg==
</data>
<flag name="review"
          id="351012"
          type_id="1"
          status="+"
          setter="jfbastien"
    />
          </attachment>
      

    </bug>

</bugzilla>