Bug 148545

Summary:	DFG::mayExit() should have a flow-insensitive variant
Product:	WebKit	Reporter:	Filip Pizlo <fpizlo>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal
Priority:	P2
Version:	Other
Hardware:	All
OS:	All

Description Filip Pizlo 2015-08-27 16:36:31 PDT

Currently mayExit() uses the Check: flag set by AI based on a flow-sensitive analysis.  That means that mayExit() results are not valid if you then move the node.  That makes it hard to use mayExit() for hoisting.