Patch forthcoming.
Created attachment 271478 [details] voila Haven't tried it yet
Created attachment 271484 [details] maybe the patch Still running tests.
Created attachment 271500 [details] the patch
Comment on attachment 271500 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=271500&action=review > Source/JavaScriptCore/ftl/FTLLowerDFGToLLVM.cpp:7739 > + m_out.branch(m_out.notNull(left), usually(leftReadyCase), rarely(slowCase)); > + > + m_out.appendTo(leftReadyCase, rightReadyCase); Do you also need those checks for StringIdent?
Comment on attachment 271500 [details] the patch View in context: https://bugs.webkit.org/attachment.cgi?id=271500&action=review >> Source/JavaScriptCore/ftl/FTLLowerDFGToLLVM.cpp:7739 >> + m_out.appendTo(leftReadyCase, rightReadyCase); > > Do you also need those checks for StringIdent? StringIdent is handled elsewhere. I believe that speculates that left and right are resolved, as opposed to this, which handles that on the slow path. But no matter how it does it, it's unrelated.
Created attachment 271523 [details] rebased patch
Landed in http://trac.webkit.org/changeset/196685