Bug 137310

Summary: Object allocation sinking is broken for escaping sites in loops
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Status: RESOLVED FIXED    
Severity: Normal CC: barraclough, commit-queue, ggaren, mark.lam, mhahnenb, msaboff, oliver, sam
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Bug Depends on:    
Bug Blocks: 137315    
Attachments:
Description Flags
the patch none

Description Filip Pizlo 2014-10-01 13:46:07 PDT
I tried to do this clever forward-flow based materialization point placement, and I messed up loops.
Comment 1 Filip Pizlo 2014-10-01 13:47:03 PDT
Created attachment 239046 [details]
the patch
Comment 2 Michael Saboff 2014-10-01 13:53:01 PDT
Comment on attachment 239046 [details]
the patch

r=me
Comment 3 WebKit Commit Bot 2014-10-01 14:34:21 PDT
Comment on attachment 239046 [details]
the patch

Clearing flags on attachment: 239046

Committed r174173: <http://trac.webkit.org/changeset/174173>
Comment 4 WebKit Commit Bot 2014-10-01 14:34:25 PDT
All reviewed patches have been landed.  Closing bug.