RESOLVED INVALID 180192
[JSC] op_in's ArrayProfile should record OutOfBounds 
https://bugs.webkit.org/show_bug.cgi?id=180192
Summary [JSC] op_in's ArrayProfile should record OutOfBounds
Yusuke Suzuki
Reported 2017-11-30 05:56:14 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Yusuke Suzuki
Comment 1 2018-01-16 20:35:47 PST
Original issue is that op_in's ArrayProfile does not record OutOfBounds. So it repeatedly causes OSR exit. I think we should introduce complete IC to op_in, which is similar to get_by_val. We would have op_in_by_val and op_in_by_id, and introduce ICs.
Note You need to log in before you can comment on or make changes to this bug.