Created attachment 267798 [details] dfg and llvm IR. We end up clobbering a volatile register with a C call we make even though that register is used immediately after the patchpoint. The problem appears to be that we’re not claiming that x1 is live-out at the patchpoint w/ patchpointID=27. The code generated for this patchpoint is at “0x146cfa588”. You can see some of the meta-data we have for this patchpoint by looking at this line in the IR dump: ``` (#27, offset = 488, flags = 0, locations = [(Register, %r11, off:0, size:8), (Register, %r8, off:0, size:8)], liveOuts = [(%r12, 8)]) ``` x1 should be live-out here because the instructions emitted immediately after the patchpoint load from x1. x1 is also a hoisted constant.
I should note that the failing test is: stress/generator-function-declaration-sinking-osrexit.js
We should remove the bandaid fix from: https://bugs.webkit.org/show_bug.cgi?id=152511 once we get a real fix.
Closing LLVM bug.