Bug 174925

Summary: Figure out caging strategy for HashMap buffers
Product: WebKit Reporter: Filip Pizlo <fpizlo>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: RESOLVED WONTFIX    
Severity: Normal CC: saam
Priority: P2    
Version: WebKit Nightly Build   
Hardware: All   
OS: All   

Description Filip Pizlo 2017-07-27 19:48:11 PDT 
Probably the JSValue gigacage.
Comment 1 Saam Barati 2017-10-31 15:56:07 PDT 
It seems like we cage them in the runtime. At least in FTLLower, we don't emit caging. I don't know about the DFG.
Comment 2 Saam Barati 2017-11-17 11:48:26 PST 
This is a WONTFIX. We're going to allocate it from the cage, but we're not going to cage accesses.