Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 4f8543eb59c333c82931a72c54759848f0b7cf12
      
https://github.com/WebKit/WebKit/commit/4f8543eb59c333c82931a72c54759848f0b7cf12
  Author: Marcus Plutowski <marcus_plutow...@apple.com>
  Date:   2025-03-10 (Mon, 10 Mar 2025)

  Changed paths:
    M Source/JavaScriptCore/b3/B3BackwardsCFG.h
    M Source/JavaScriptCore/b3/B3BackwardsDominators.h
    M Source/JavaScriptCore/b3/B3BasicBlock.cpp
    M Source/JavaScriptCore/b3/B3BasicBlock.h
    M Source/JavaScriptCore/b3/B3CFG.h
    M Source/JavaScriptCore/b3/B3CheckSpecial.cpp
    M Source/JavaScriptCore/b3/B3CheckSpecial.h
    M Source/JavaScriptCore/b3/B3Dominators.h
    M Source/JavaScriptCore/b3/B3NaturalLoops.h
    M Source/JavaScriptCore/b3/B3PhiChildren.cpp
    M Source/JavaScriptCore/b3/B3PhiChildren.h
    M Source/JavaScriptCore/b3/B3Procedure.cpp
    M Source/JavaScriptCore/b3/B3Procedure.h
    M Source/JavaScriptCore/b3/B3StackmapSpecial.h
    M Source/JavaScriptCore/b3/B3TZoneImpls.cpp
    M Source/JavaScriptCore/b3/B3Value.cpp
    M Source/JavaScriptCore/b3/B3Value.h
    M Source/JavaScriptCore/b3/B3ValueRep.cpp
    M Source/JavaScriptCore/b3/B3ValueRep.h
    M Source/JavaScriptCore/b3/B3Variable.cpp
    M Source/JavaScriptCore/b3/B3Variable.h
    M Source/JavaScriptCore/dfg/DFGSlowPathGenerator.h
    M Source/JavaScriptCore/ftl/FTLState.cpp
    M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp
    M Source/JavaScriptCore/wasm/WasmOMGIRGenerator32_64.cpp

  Log Message:
  -----------
  [JSC] Allocate b3 types using SequesteredArenaAllocator
https://bugs.webkit.org/show_bug.cgi?id=287995
rdar://145159538

Reviewed by Yijia Huang.

This covers all of the air-internal types whose lifetimes do not extend
past that of a compilation job. Allocating these out of the arena is
intended to improve security and performance.
Note that this does not yet cover all bytes used by Air: components
which themselves allocate (e.g. Vector) need to be handled separately.
This patch just ensures that when the top-level types are allocated
directly, they're allocated using SequesteredArenaMalloc.

The primary notable type not covered is the B3DataSection, which will
need to be allocated using the future persistent allocator.

* Source/JavaScriptCore/b3/B3BackwardsCFG.h:
* Source/JavaScriptCore/b3/B3BackwardsDominators.h:
* Source/JavaScriptCore/b3/B3BasicBlock.cpp:
* Source/JavaScriptCore/b3/B3BasicBlock.h:
* Source/JavaScriptCore/b3/B3CFG.h:
* Source/JavaScriptCore/b3/B3CheckSpecial.cpp:
* Source/JavaScriptCore/b3/B3CheckSpecial.h:
* Source/JavaScriptCore/b3/B3DataSection.h:
* Source/JavaScriptCore/b3/B3Dominators.h:
* Source/JavaScriptCore/b3/B3NaturalLoops.h:
* Source/JavaScriptCore/b3/B3PhiChildren.cpp:
* Source/JavaScriptCore/b3/B3PhiChildren.h:
* Source/JavaScriptCore/b3/B3Procedure.cpp:
* Source/JavaScriptCore/b3/B3Procedure.h:
* Source/JavaScriptCore/b3/B3StackmapSpecial.h:
* Source/JavaScriptCore/b3/B3TZoneImpls.cpp:
* Source/JavaScriptCore/b3/B3Value.cpp:
* Source/JavaScriptCore/b3/B3Value.h:
* Source/JavaScriptCore/b3/B3ValueRep.cpp:
* Source/JavaScriptCore/b3/B3ValueRep.h:
* Source/JavaScriptCore/b3/B3Variable.cpp:
* Source/JavaScriptCore/b3/B3Variable.h:
* Source/JavaScriptCore/ftl/FTLState.cpp:
(JSC::FTL::State::State):
* Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp:
(JSC::Wasm::parseAndCompileOMG):
* Source/JavaScriptCore/wasm/WasmOMGIRGenerator32_64.cpp:
(JSC::Wasm::parseAndCompileOMG):

Canonical link: https://commits.webkit.org/291921@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to