Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 716536ce98d6f8d40c44abed667b6a1970023e17
      
https://github.com/WebKit/WebKit/commit/716536ce98d6f8d40c44abed667b6a1970023e17
  Author: Yusuke Suzuki <[email protected]>
  Date:   2025-10-06 (Mon, 06 Oct 2025)

  Changed paths:
    A JSTests/stress/regexp-matches-array-should-respect-have-a-bad-time.js
    M Source/JavaScriptCore/runtime/JSGlobalObjectInlines.h

  Log Message:
  -----------
  [JSC]ASSERTION FAILED: !needsSlowPutIndexing() at ensureArrayStorageSlow
https://bugs.webkit.org/show_bug.cgi?id=291745
rdar://149546458

Reviewed by Keith Miller.

We should not create Contiguous array when have-a-bad-time happened for
RegExp match results.

* JSTests/stress/regexp-matches-array-should-respect-have-a-bad-time.js: Added.
(F0.C4):
(F0.f5):
(F0):
(set get for):
* Source/JavaScriptCore/runtime/JSGlobalObjectInlines.h:
(JSC::tryCreateContiguousArrayWithPattern):

Originally-landed-as: 289651.443@safari-7621-branch (e4c46a52540e). 
rdar://159890775
Canonical link: https://commits.webkit.org/301076@main


  Commit: 899a38cf9a50a555c1fb3fd5e3ae21271447ecc8
      
https://github.com/WebKit/WebKit/commit/899a38cf9a50a555c1fb3fd5e3ae21271447ecc8
  Author: Daniel Liu <[email protected]>
  Date:   2025-10-06 (Mon, 06 Oct 2025)

  Changed paths:
    A JSTests/wasm/stress/omg-osr-stack-slot-positioning.js
    M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp

  Log Message:
  -----------
  OMG stack slots should be positioned at the beginning of the OSR buffer when 
IPInt OSR layout is used
https://bugs.webkit.org/show_bug.cgi?id=296490
rdar://155783944

Reviewed by Yusuke Suzuki.

IPInt uses rethrow slots in the OSR buffer, which are positioned at the
beginning of the buffer. During OSR stackmap generation, OMG should not
put in any locals or stack values until all slots are accounted for and
incremented past.

* JSTests/wasm/stress/omg-osr-stack-slot-positioning.js: Added.
(instantiate):
(async let):
* Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp:
(JSC::Wasm::OMGIRGenerator::addLoop):

Originally-landed-as: 297297.196@safari-7622-branch (c4c5c5e57ff5). 
rdar://159890802
Canonical link: https://commits.webkit.org/301077@main


Compare: https://github.com/WebKit/WebKit/compare/1ae1b3ca256e...899a38cf9a50

To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to