Bug 198189

Summary: DFG::OSREntry should not perform arity check
Product: WebKit Reporter: Tadeu Zagallo <tzagallo>
Component: JavaScriptCoreAssignee: Tadeu Zagallo <tzagallo>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, ews-watchlist, keith_miller, mark.lam, msaboff, saam, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch none

Description Tadeu Zagallo 2019-05-23 11:27:57 PDT 
The following code compiles 7 times, but never tiers up to DFG because of the arity check:

function foo(x, y) {
    for (var i = 0; i < 1e8; i++) {
        x[y] += i;
    }
}
foo({})
Comment 1 Tadeu Zagallo 2019-05-23 11:36:10 PDT 
Created attachment 370511 [details]
Patch
Comment 2 Tadeu Zagallo 2019-05-23 11:43:20 PDT 
Created attachment 370513 [details]
Patch

Fix typo in ChangeLog
Comment 3 WebKit Commit Bot 2019-05-23 13:43:55 PDT 
Comment on attachment 370513 [details]
Patch

Clearing flags on attachment: 370513

Committed r245710: <https://trac.webkit.org/changeset/245710>
Comment 4 WebKit Commit Bot 2019-05-23 13:43:57 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 5 Radar WebKit Bug Importer 2019-05-23 13:44:22 PDT 
<rdar://problem/51080799>