Bug 216117

Summary:	[JSC] We should not watch all toString / valueOf in JSObject::ordinaryToPrimitive
Product:	WebKit	Reporter:	Yusuke Suzuki <ysuzuki>
Component:	JavaScriptCore	Assignee:	Yusuke Suzuki <ysuzuki>
Status:	NEW
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Yusuke Suzuki

Reported 2020-09-02 21:52:19 PDT

1. If we do that for StringObjectStructures, then we do not need to do this here since DFG is currently only seeing StringObjectStructure. 2. Or, if DFG carefully checks toString or valueOf based on the context, then we do not need to watch here since toString / valueOf caching will watch.

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2020-09-09 21:53:15 PDT

<rdar://problem/68618575>

Note You need to log in before you can comment on or make changes to this bug.