Changeset 94914 in webkit for trunk/Source/JavaScriptCore/dfg/DFGJITCompiler.cpp

Timestamp:

Sep 10, 2011, 2:23:45 PM (14 years ago)

Author:

[email protected]

Message:

DFG JIT completely undoes speculative compilation even in the case of
a partial static speculation failure
​https://bugs.webkit.org/show_bug.cgi?id=67798

Reviewed by Geoffrey Garen.

This is a regression with static speculation, so it is turned off by
default. But it is a necessary prerequisite for further work on
dynamic speculation.

• dfg/DFGJITCodeGenerator.cpp:

(JSC::DFG::JITCodeGenerator::clearGenerationInfo):

• dfg/DFGJITCodeGenerator.h:
• dfg/DFGSpeculativeJIT.cpp:

(JSC::DFG::SpeculativeJIT::fillSpeculateIntInternal):
(JSC::DFG::SpeculativeJIT::compile):

• dfg/DFGSpeculativeJIT.h:

(JSC::DFG::SpeculativeJIT::terminateSpeculativeExecution):

File:

• trunk/Source/JavaScriptCore/dfg/DFGJITCompiler.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/dfg/DFGJITCompiler.cpp

@@ -852 +852 @@
         linkSpeculationChecks(speculative, nonSpeculative);
     } else {
-#if DFG_DEBUG_VERBOSE
-        fprintf(stderr, "SpeculativeJIT was terminated.\n");
-#endif
-
         // If compilation through the SpeculativeJIT failed, throw away the code we generated.
         m_calls.clear();