<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>253298</bug_id>
          
          <creation_ts>2023-03-02 23:06:30 -0800</creation_ts>
          <short_desc>Fix control flow with multiple exits on single-pass BBQ JIT</short_desc>
          <delta_ts>2023-03-03 01:03:38 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebAssembly</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>252209</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="David Degazio">d_degazio</reporter>
          <assigned_to name="David Degazio">d_degazio</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1938417</commentid>
    <comment_count>0</comment_count>
    <who name="David Degazio">d_degazio</who>
    <bug_when>2023-03-02 23:06:30 -0800</bug_when>
    <thetext>rdar://106182518

Currently, in control flow instructions with multiple exits (namely br_if and br_table), we assume that the calling convention for each target’s block arguments will be the same. This is not the case universally though: 
 - When targeting the top level block, the results are allocated according to the WASM calling convention, not the block calling convention.
 - If we run out of registers to use for the block calling convention, we pass arguments through WASM canonical stack slots. But the stack height of these may vary between target blocks, even if they have the same signature.

To fix this, we need to modify the ControlData methods currently used to manage control flow blocks, to permit setting up for multiple distinct exit branches per block.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1938418</commentid>
    <comment_count>1</comment_count>
    <who name="David Degazio">d_degazio</who>
    <bug_when>2023-03-02 23:19:51 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/10988</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1938429</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-03-03 01:03:36 -0800</bug_when>
    <thetext>Committed 261122@main (bc648d25c5aa): &lt;https://commits.webkit.org/261122@main&gt;

Reviewed commits have been landed. Closing PR #10988 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>