Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: d9b3841d9b3f0add783541f6d080054775183539
https://github.com/WebKit/WebKit/commit/d9b3841d9b3f0add783541f6d080054775183539
Author: Yusuke Suzuki <[email protected]>
Date: 2026-03-04 (Wed, 04 Mar 2026)
Changed paths:
A JSTests/stress/iterator-next-liveness.js
M Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp
Log Message:
-----------
[JSC] DFG iterator_next / iterator_open should emit Phantom for uses before
emitting ForceOSRExit
https://bugs.webkit.org/show_bug.cgi?id=309204
rdar://171766191
Reviewed by Keith Miller.
If we would like to emit ForceOSRExit in ByteCodeParser, we need to put
Phantom to make sure that used locals are alive in DFG. Otherwise, DFG
thinks that this is dead, and emitting undefined when OSR happens.
Test: JSTests/stress/iterator-next-liveness.js
* JSTests/stress/iterator-next-liveness.js: Added.
* Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::parseBlock):
Canonical link: https://commits.webkit.org/308677@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
