Title: [289085] trunk/Source/_javascript_Core
Revision
289085
Author
ysuz...@apple.com
Date
2022-02-03 15:27:03 -0800 (Thu, 03 Feb 2022)

Log Message

[JSC] MultiDeleteByOffset should not define value
https://bugs.webkit.org/show_bug.cgi?id=236103

Reviewed by Saam Barati.

MultiDeleteByOffset should not define any values in clobberizing.

* dfg/DFGClobberize.h:
(JSC::DFG::clobberize):

Modified Paths

Diff

Modified: trunk/Source/_javascript_Core/ChangeLog (289084 => 289085)


--- trunk/Source/_javascript_Core/ChangeLog	2022-02-03 23:21:54 UTC (rev 289084)
+++ trunk/Source/_javascript_Core/ChangeLog	2022-02-03 23:27:03 UTC (rev 289085)
@@ -1,5 +1,17 @@
 2022-02-03  Yusuke Suzuki  <ysuz...@apple.com>
 
+        [JSC] MultiDeleteByOffset should not define value
+        https://bugs.webkit.org/show_bug.cgi?id=236103
+
+        Reviewed by Saam Barati.
+
+        MultiDeleteByOffset should not define any values in clobberizing.
+
+        * dfg/DFGClobberize.h:
+        (JSC::DFG::clobberize):
+
+2022-02-03  Yusuke Suzuki  <ysuz...@apple.com>
+
         Unreviewed, remove UnlinkedMetadataTable::offsetInMetadataTable since it is no longer used
         https://bugs.webkit.org/show_bug.cgi?id=236063
 

Modified: trunk/Source/_javascript_Core/dfg/DFGClobberize.h (289084 => 289085)


--- trunk/Source/_javascript_Core/dfg/DFGClobberize.h	2022-02-03 23:21:54 UTC (rev 289084)
+++ trunk/Source/_javascript_Core/dfg/DFGClobberize.h	2022-02-03 23:27:03 UTC (rev 289085)
@@ -1414,8 +1414,6 @@
             // alias analysis.
             write(NamedProperties);
         }
-        if (node->multiDeleteByOffsetData().allVariantsStoreEmpty())
-            def(HeapLocation(NamedPropertyLoc, heap, node->child1()), LazyNode(graph.freezeStrong(JSValue())));
         return;
     }
         
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to