Bug 68785

Summary:

DFG JIT does not count speculation successes correctly

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

fpizlo, oliver

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	ggaren: review+

Description Filip Pizlo 2011-09-25 19:44:36 PDT

Speculation successes are counted in the code block entry code, which is skipped in the case of function code.

Comment 1 Filip Pizlo 2011-09-25 19:46:08 PDT

Created attachment 108621 [details]
the patch

Comment 2 Geoffrey Garen 2011-09-25 20:08:40 PDT

Comment on attachment 108621 [details]
the patch

r=me

Comment 3 Filip Pizlo 2011-09-25 21:05:00 PDT

Landed in r95933.