Changeset 172961 in webkit for trunk/Source/JavaScriptCore/dfg/DFGValidate.cpp

Timestamp:

Aug 26, 2014, 9:46:10 AM (11 years ago)

Author:

[email protected]

Message:

Unreviewed, rolling out r172940.
​https://bugs.webkit.org/show_bug.cgi?id=136256

Caused assertions on fast/storage/serialized-script-
value.html, and possibly flakiness on more tests (Requested by
ap on #webkit).

Reverted changeset:

"FTL should be able to do polymorphic call inlining"
​https://bugs.webkit.org/show_bug.cgi?id=135145
​http://trac.webkit.org/changeset/172940

File:

• trunk/Source/JavaScriptCore/dfg/DFGValidate.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/dfg/DFGValidate.cpp

@@ -201 +201 @@
                 VALIDATE((node), !mayExit(m_graph, node) || node->origin.forExit.isSet());
                 VALIDATE((node), !node->hasStructure() || !!node->structure());
-                VALIDATE((node), !node->hasCellOperand() || node->cellOperand()->value().isCell());
-                VALIDATE((node), !node->hasCellOperand() || !!node->cellOperand()->value());
+                VALIDATE((node), !node->hasFunction() || node->function()->value().isFunction());
                  
                 if (!(node->flags() & NodeHasVarArgs)) {