Bug 99371
| Summary: | DFG should be able to hoist CheckArrays and Arrayifies | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Filip Pizlo <fpizlo> |
| Component: | JavaScriptCore | Assignee: | Filip Pizlo <fpizlo> |
| Status: | NEW | ||
| Severity: | Normal | CC: | barraclough, ggaren, mark.lam, mhahnenberg, msaboff, oliver |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
| Bug Depends on: | 99287 | ||
| Bug Blocks: | 98606 | ||
Filip Pizlo
Patch forthcoming.
This is somewhat related to https://bugs.webkit.org/show_bug.cgi?id=99260. This bug doesn't try to optimize array checks to structures in the polymorphic structure case, while the other bug tries to find cases where an Arrayify is "structurally polymorphic" only before execution, but then always ends up at exactly one structure after execution.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |