Bug 100441 - DFG Arrayify elimination should replace it with GetButterfly rather than Phantom
Summary: DFG Arrayify elimination should replace it with GetButterfly rather than Phantom
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Filip Pizlo
URL:
Keywords: InRadar
: 100077 (view as bug list)
Depends on: 100474
Blocks:
  Show dependency treegraph
 
Reported: 2012-10-25 18:17 PDT by Filip Pizlo
Modified: 2012-10-30 16:44 PDT (History)
8 users (show)

See Also:


Attachments
the patch (36.67 KB, patch)
2012-10-25 18:47 PDT, Filip Pizlo
oliver: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2012-10-25 18:17:10 PDT
Patch forthcoming.
Comment 1 Filip Pizlo 2012-10-25 18:17:32 PDT
<rdar://problem/12575245>
Comment 2 Filip Pizlo 2012-10-25 18:47:47 PDT
Created attachment 170783 [details]
the patch
Comment 3 Gavin Barraclough 2012-10-25 18:54:27 PDT
r=me too.  rs=me, if you come up with a test for have structures.
Comment 4 Filip Pizlo 2012-10-25 18:59:19 PDT
Landed in http://trac.webkit.org/changeset/132554
Comment 5 Nandor Huszka 2012-10-26 00:34:17 PDT
The fast/js/dfg-arrayify-elimination.html test fails on 32 bit platforms:
https://bugs.webkit.org/show_bug.cgi?id=100474

Skipped on Qt by http://trac.webkit.org/changeset/132577. Please unskip it with the proper fix.
Comment 6 Drew Yao 2012-10-30 16:44:08 PDT
*** Bug 100077 has been marked as a duplicate of this bug. ***