Changeset 203704 in webkit for trunk/Source/JavaScriptCore/dfg/DFGObjectAllocationSinkingPhase.cpp

Timestamp:

Jul 25, 2016, 6:05:43 PM (9 years ago)

Author:

[email protected]

Message:

Unreviewed, rolling out r203703.

It breaks some internal tests

Reverted changeset:

"[JSC] DFG::Node should not have its own allocator"
​https://bugs.webkit.org/show_bug.cgi?id=160098
​http://trac.webkit.org/changeset/203703

File:

• trunk/Source/JavaScriptCore/dfg/DFGObjectAllocationSinkingPhase.cpp (modified) (3 diffs)

trunk/Source/JavaScriptCore/dfg/DFGObjectAllocationSinkingPhase.cpp

@@ -2103 +2103 @@
 
                 return m_graph.addNode(
+                    SpecNone,
                     PutByOffset,
                     origin.takeValidExit(canExit),
@@ -2137 +2138 @@
 
             return m_graph.addNode(
+                SpecNone,
                 MultiPutByOffset,
                 origin.takeValidExit(canExit),
@@ -2147 +2149 @@
         case ClosureVarPLoc: {
             return m_graph.addNode(
+                SpecNone,
                 PutClosureVar,
                 origin.takeValidExit(canExit),