Bug 199968
| Summary: | [JSC] Allow GC after lowering to B3 | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Yusuke Suzuki <ysuzuki> |
| Component: | JavaScriptCore | Assignee: | Yusuke Suzuki <ysuzuki> |
| Status: | RESOLVED WORKSFORME | ||
| Severity: | Normal | CC: | saam |
| Priority: | P2 | ||
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Yusuke Suzuki
This is rough idea, I'm not sure whether it is already done, or it is possible.
After lowering to B3, we do not have access to JS heap. And all the cell pointers must be collected in lowering phase by `freeze`.
So, the idea is that, while optimizing things in B3, we are safe to be stopped at arbitrary time for GC.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Saam Barati
(In reply to Yusuke Suzuki from comment #0)
> This is rough idea, I'm not sure whether it is already done, or it is
> possible.
> After lowering to B3, we do not have access to JS heap. And all the cell
> pointers must be collected in lowering phase by `freeze`.
> So, the idea is that, while optimizing things in B3, we are safe to be
> stopped at arbitrary time for GC.
This is already the case. We run all of this under a safe point