Changeset 280198 in webkit for trunk/Source/JavaScriptCore/ftl/FTLOutput.h

Timestamp:

Jul 22, 2021, 2:37:02 PM (4 years ago)

Author:

[email protected]

Message:

AirStackSlot's uint16_t byte size is too small
​https://bugs.webkit.org/show_bug.cgi?id=228193
<rdar://80888059>

Reviewed by Mark Lam.

JSTests:

• stress/stack-slot-needs-to-use-more-than-uint16.js: Added.

Source/JavaScriptCore:

• b3/B3Procedure.cpp:

(JSC::B3::Procedure::addStackSlot):

• b3/B3Procedure.h:
• b3/air/AirCode.cpp:

(JSC::B3::Air::Code::addStackSlot):

• b3/air/AirCode.h:
• b3/air/AirStackSlot.cpp:

(JSC::B3::Air::StackSlot::StackSlot):

• b3/air/AirStackSlot.h:

(JSC::B3::Air::StackSlot::ensureSize):

• ftl/FTLLowerDFGToB3.cpp:

(JSC::FTL::DFG::LowerDFGToB3::lower):

• ftl/FTLOutput.cpp:

(JSC::FTL::Output::lockedStackSlot):

• ftl/FTLOutput.h:

File:

• trunk/Source/JavaScriptCore/ftl/FTLOutput.h (modified) (1 diff)

trunk/Source/JavaScriptCore/ftl/FTLOutput.h

@@ -101 +101 @@
     LValue framePointer();
 
-    B3::SlotBaseValue* lockedStackSlot(size_t bytes);
+    B3::SlotBaseValue* lockedStackSlot(uint64_t bytes);
 
     LValue constBool(bool value);