99371 2012-10-15 15:06:50 -0700 DFG should be able to hoist CheckArrays and Arrayifies 2012-10-15 15:06:50 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) All All NEW P2 Normal --- 99287 98606 1 fpizlo fpizlo barraclough ggaren mark.lam mhahnenberg msaboff oliver oldest_to_newest 742497 0 fpizlo 2012-10-15 15:06:50 -0700 Patch forthcoming. This is somewhat related to https://bugs.webkit.org/show_bug.cgi?id=99260. This bug doesn't try to optimize array checks to structures in the polymorphic structure case, while the other bug tries to find cases where an Arrayify is "structurally polymorphic" only before execution, but then always ends up at exactly one structure after execution.