Branch: refs/heads/main Home: https://github.com/WebKit/WebKit Commit: 4f8543eb59c333c82931a72c54759848f0b7cf12 https://github.com/WebKit/WebKit/commit/4f8543eb59c333c82931a72c54759848f0b7cf12 Author: Marcus Plutowski <marcus_plutow...@apple.com> Date: 2025-03-10 (Mon, 10 Mar 2025)
Changed paths: M Source/JavaScriptCore/b3/B3BackwardsCFG.h M Source/JavaScriptCore/b3/B3BackwardsDominators.h M Source/JavaScriptCore/b3/B3BasicBlock.cpp M Source/JavaScriptCore/b3/B3BasicBlock.h M Source/JavaScriptCore/b3/B3CFG.h M Source/JavaScriptCore/b3/B3CheckSpecial.cpp M Source/JavaScriptCore/b3/B3CheckSpecial.h M Source/JavaScriptCore/b3/B3Dominators.h M Source/JavaScriptCore/b3/B3NaturalLoops.h M Source/JavaScriptCore/b3/B3PhiChildren.cpp M Source/JavaScriptCore/b3/B3PhiChildren.h M Source/JavaScriptCore/b3/B3Procedure.cpp M Source/JavaScriptCore/b3/B3Procedure.h M Source/JavaScriptCore/b3/B3StackmapSpecial.h M Source/JavaScriptCore/b3/B3TZoneImpls.cpp M Source/JavaScriptCore/b3/B3Value.cpp M Source/JavaScriptCore/b3/B3Value.h M Source/JavaScriptCore/b3/B3ValueRep.cpp M Source/JavaScriptCore/b3/B3ValueRep.h M Source/JavaScriptCore/b3/B3Variable.cpp M Source/JavaScriptCore/b3/B3Variable.h M Source/JavaScriptCore/dfg/DFGSlowPathGenerator.h M Source/JavaScriptCore/ftl/FTLState.cpp M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp M Source/JavaScriptCore/wasm/WasmOMGIRGenerator32_64.cpp Log Message: ----------- [JSC] Allocate b3 types using SequesteredArenaAllocator https://bugs.webkit.org/show_bug.cgi?id=287995 rdar://145159538 Reviewed by Yijia Huang. This covers all of the air-internal types whose lifetimes do not extend past that of a compilation job. Allocating these out of the arena is intended to improve security and performance. Note that this does not yet cover all bytes used by Air: components which themselves allocate (e.g. Vector) need to be handled separately. This patch just ensures that when the top-level types are allocated directly, they're allocated using SequesteredArenaMalloc. The primary notable type not covered is the B3DataSection, which will need to be allocated using the future persistent allocator. * Source/JavaScriptCore/b3/B3BackwardsCFG.h: * Source/JavaScriptCore/b3/B3BackwardsDominators.h: * Source/JavaScriptCore/b3/B3BasicBlock.cpp: * Source/JavaScriptCore/b3/B3BasicBlock.h: * Source/JavaScriptCore/b3/B3CFG.h: * Source/JavaScriptCore/b3/B3CheckSpecial.cpp: * Source/JavaScriptCore/b3/B3CheckSpecial.h: * Source/JavaScriptCore/b3/B3DataSection.h: * Source/JavaScriptCore/b3/B3Dominators.h: * Source/JavaScriptCore/b3/B3NaturalLoops.h: * Source/JavaScriptCore/b3/B3PhiChildren.cpp: * Source/JavaScriptCore/b3/B3PhiChildren.h: * Source/JavaScriptCore/b3/B3Procedure.cpp: * Source/JavaScriptCore/b3/B3Procedure.h: * Source/JavaScriptCore/b3/B3StackmapSpecial.h: * Source/JavaScriptCore/b3/B3TZoneImpls.cpp: * Source/JavaScriptCore/b3/B3Value.cpp: * Source/JavaScriptCore/b3/B3Value.h: * Source/JavaScriptCore/b3/B3ValueRep.cpp: * Source/JavaScriptCore/b3/B3ValueRep.h: * Source/JavaScriptCore/b3/B3Variable.cpp: * Source/JavaScriptCore/b3/B3Variable.h: * Source/JavaScriptCore/ftl/FTLState.cpp: (JSC::FTL::State::State): * Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp: (JSC::Wasm::parseAndCompileOMG): * Source/JavaScriptCore/wasm/WasmOMGIRGenerator32_64.cpp: (JSC::Wasm::parseAndCompileOMG): Canonical link: https://commits.webkit.org/291921@main To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications _______________________________________________ webkit-changes mailing list webkit-changes@lists.webkit.org https://lists.webkit.org/mailman/listinfo/webkit-changes