Bug 174925
| Summary: | Figure out caging strategy for HashMap buffers | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Filip Pizlo <fpizlo> |
| Component: | JavaScriptCore | Assignee: | Saam Barati <saam> |
| Status: | RESOLVED WONTFIX | ||
| Severity: | Normal | CC: | saam |
| Priority: | P2 | ||
| Version: | WebKit Nightly Build | ||
| Hardware: | All | ||
| OS: | All | ||
Filip Pizlo
Probably the JSValue gigacage.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Saam Barati
It seems like we cage them in the runtime. At least in FTLLower, we don't emit caging. I don't know about the DFG.
Saam Barati
This is a WONTFIX. We're going to allocate it from the cage, but we're not going to cage accesses.