Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 8ef69567a7ea85e6515ab81b1afbe1056b40aeb5
https://github.com/WebKit/WebKit/commit/8ef69567a7ea85e6515ab81b1afbe1056b40aeb5
Author: Yusuke Suzuki <[email protected]>
Date: 2025-03-28 (Fri, 28 Mar 2025)
Changed paths:
M Source/JavaScriptCore/dfg/DFGIntegerRangeOptimizationPhase.cpp
Log Message:
-----------
[JSC] Narrow down integer range of GetArrayLength / GetVectorLength
https://bugs.webkit.org/show_bug.cgi?id=290667
rdar://148140872
Reviewed by Sosuke Suzuki.
When they have specific array modes (Or just GetVectorLength), their
length is less than (MAX_STORAGE_VECTOR_LENGTH + 1). This patch
integrates this knowledge into integer range optimization so that if we
have a code like this,
for (var i = 0; i < array.length; ++i) {
...
}
We can easily determine that ++i never overflows since it is bound
by array.length, and it is not reaching to INT32_MAX.
* Source/JavaScriptCore/dfg/DFGIntegerRangeOptimizationPhase.cpp:
Canonical link: https://commits.webkit.org/292884@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
