Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 48c731f5f0b18720b0ae418481ae020fc277fd3e
https://github.com/WebKit/WebKit/commit/48c731f5f0b18720b0ae418481ae020fc277fd3e
Author: Justin Michaud <[email protected]>
Date: 2025-11-20 (Thu, 20 Nov 2025)
Changed paths:
A JSTests/microbenchmarks/for-of-vs-for-each-hole.js
M Source/JavaScriptCore/dfg/DFGArrayMode.cpp
M Source/JavaScriptCore/dfg/DFGFixupPhase.cpp
Log Message:
-----------
Do not speculate InBounds if we see LoadFromHole exit
https://bugs.webkit.org/show_bug.cgi?id=302830
Reviewed by Yusuke Suzuki.
If we see a LoadFromHole, HasIndexedProperty exits in testForOf, causing
an OSR exit loop. We pessimize this case, letting compilation continue.
This gives a 5x improvement to testForOf.
Canonical link: https://commits.webkit.org/303355@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
