Reviewers: Mads Ager, fschneider, Description: Partial fix for V8 issue 1079.
Record a safepoint with a deoptimization id for throw in optimized code. We don't seem to much care what the AST ID is because we will not be using it for lazy deoptimization (throw doesn't return to the point of throw). For hygiene we use the actual ID of the throw expression. Throw is no longer a control-flow instruction, but it's followed by an unconditional abnormal exit. This is required to insert a simulate between the throw and the exit. Make our optimized treatment of Function.prototype.apply act like a call and have side effects. This ensures that it will get a lazy deoptimization environment. Use that deoptimization ID in the safepoint for the call. Deleting a property was also missing a deoptimization ID, though there was a deoptimization environment assigned to the instruction. Record the environment and use the deoptimization ID at the safepoint. Please review this at http://codereview.chromium.org/6250105/ SVN Base: https://v8.googlecode.com/svn/branches/bleeding_edge/build/ia32 Affected files: M src/arm/deoptimizer-arm.cc M src/arm/lithium-arm.h M src/arm/lithium-arm.cc M src/arm/lithium-codegen-arm.cc M src/deoptimizer.h M src/hydrogen-instructions.h M src/hydrogen.cc M src/ia32/deoptimizer-ia32.cc M src/ia32/lithium-codegen-ia32.cc M src/ia32/lithium-ia32.h M src/ia32/lithium-ia32.cc M src/safepoint-table.h M src/safepoint-table.cc M src/x64/deoptimizer-x64.cc M src/x64/lithium-codegen-x64.cc M src/x64/lithium-x64.h M src/x64/lithium-x64.cc M test/cctest/cctest.status A test/mjsunit/regress/regress-1079.js -- v8-dev mailing list v8-dev@googlegroups.com http://groups.google.com/group/v8-dev
