Changeset 53025 in webkit for trunk/JavaScriptCore/runtime/JSArray.h

Timestamp:

Jan 8, 2010, 5:02:38 PM (15 years ago)

Author:

[email protected]

Message:

2010-01-08 Geoffrey Garen <​[email protected]>

Reviewed by Oliver Hunt.

Memory use grows grows possibly unbounded in this JavaScript Array test case
​https://bugs.webkit.org/show_bug.cgi?id=31675

This fixes one observed bug in this test case, which is that
arrays don't report extra cost for the sparse value maps.

SunSpider reports a small speedup.

• runtime/JSArray.cpp: (JSC::JSArray::putSlowCase): Report extra memory cost for the sparse value map.
• runtime/JSArray.h:

File:

• trunk/JavaScriptCore/runtime/JSArray.h (modified) (1 diff)

trunk/JavaScriptCore/runtime/JSArray.h

@@ -33 +33 @@
         SparseArrayValueMap* m_sparseValueMap;
         void* lazyCreationData; // A JSArray subclass can use this to fill the vector lazily.
+        size_t reportedMapCapacity;
         JSValue m_vector[1];
     };