Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: d771407d4bb4b8bb3a06455425e2cdf3011ec85b
https://github.com/WebKit/WebKit/commit/d771407d4bb4b8bb3a06455425e2cdf3011ec85b
Author: David Degazio <d_dega...@apple.com>
Date: 2023-07-28 (Fri, 28 Jul 2023)
Changed paths:
M Source/JavaScriptCore/dfg/DFGHeapLocation.cpp
Log Message:
-----------
Backport fix for erroneous CSE of EnumeratorNextUpdateIndexAndMode and
HasIndexedProperty
rdar://110785576
Reviewed by Michael Saboff, Justin Michaud and Yusuke Suzuki.
Backports part of https://commits.webkit.org/263909@main, which
prevents erroneous elimination of an EnumeratorNextUpdateIndexAndMode
and HasIndexedProperty node pair if they have the same operands.
The full commit in 263909@main depends on the existence of DFG tuples,
which haven't yet been brought into the security branch, so those
parts are omitted from this patch.
* Source/JavaScriptCore/dfg/DFGClobberize.h:
(JSC::DFG::clobberize):
* Source/JavaScriptCore/dfg/DFGHeapLocation.cpp:
(WTF::printInternal):
* Source/JavaScriptCore/dfg/DFGHeapLocation.h:
Originally-landed-as: 259548.828@safari-7615-branch (01e86f13952b).
rdar://110785576
Canonical link: https://commits.webkit.org/266389@main
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
