CompareEq of non-integer values is the most common cause of speculation failure.
Created attachment 97507 [details] The patch
Comment on attachment 97507 [details] The patch View in context: https://bugs.webkit.org/attachment.cgi?id=97507&action=review > Source/JavaScriptCore/ChangeLog:16 > + * dfg/DFGSpeculativeJIT.cpp: > + (JSC::DFG::SpeculativeJIT::compilePeepHoleIntegerBranch): > + (JSC::DFG::SpeculativeJIT::compilePeepHoleEq): > + (JSC::DFG::SpeculativeJIT::compile): > + * dfg/DFGSpeculativeJIT.h: > + (JSC::DFG::SpeculativeJIT::detectPeepHoleBranch): > + (JSC::DFG::SpeculativeJIT::isInteger): PLease add data :(
Fixed in r89084