I have no evidence that this doesn't work. I just think we can do better.
Created attachment 190094 [details] work in progress
Created attachment 190167 [details] it runs things Haven't seen what the perf impact is, yet. And I'm not yet sure that it's entirely correct.
Created attachment 190392 [details] the patch
Comment on attachment 190392 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=190392&action=review r=me too, fwiw > Source/JavaScriptCore/dfg/DFGCommon.h:225 > +bool setAndCheck(T& left, U right) checkAndSet?
(In reply to comment #4) > (From update of attachment 190392 [details]) > View in context: https://bugs.webkit.org/attachment.cgi?id=190392&action=review > > r=me too, fwiw > > > Source/JavaScriptCore/dfg/DFGCommon.h:225 > > +bool setAndCheck(T& left, U right) > > checkAndSet? Yup, renamed!
Landed in http://trac.webkit.org/changeset/144131