haikuwebkit/LayoutTests/js/dfg-constant-fold-first-loc...

Tests that the DFG doesn't crash if we constant fold the first read of a local variable in a block that is the result of merging two blocks, where the first doesn't touch the local and the second reads it.

On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".


PASS bar(5) is 42 on all iterations including after DFG tier-up.
PASS successfullyParsed is true

TEST COMPLETE
DFG CFG simplification should correct the variables at the head of the predecessor block https://bugs.webkit.org/show_bug.cgi?id=88284 Reviewed by Geoffrey Garen. Source/JavaScriptCore: * dfg/DFGCFGSimplificationPhase.cpp: (JSC::DFG::CFGSimplificationPhase::mergeBlocks): LayoutTests: * fast/js/dfg-constant-fold-first-local-read-after-block-merge-expected.txt: Added. * fast/js/dfg-constant-fold-first-local-read-after-block-merge.html: Added. * fast/js/script-tests/dfg-constant-fold-first-local-read-after-block-merge.js: Added. (foo): (bar): Canonical link: https://commits.webkit.org/106129@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@119464 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2012-06-05 06:40:48 +00:00			`Tests that the DFG doesn't crash if we constant fold the first read of a local variable in a block that is the result of merging two blocks, where the first doesn't touch the local and the second reads it.`

			`On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".`


REGRESSION(149636, merged in 153145): ToThis conversion doesn't work in the DFG https://bugs.webkit.org/show_bug.cgi?id=120781 Reviewed by Mark Hahnenberg. Roll this back in with a build fix. - Use some method table hacks to detect if the CheckStructure optimization is valid for to_this. - Introduce a FinalObjectUse and use it for ToThis->Identity conversion. This looks like it might be perf-neutral on the major benchmarks, but it introduces some horrible performance cliffs. For example if you add methods to the Array prototype, you'll get horrible performance cliffs. As in virtual calls to C++ every time you call a JS function even if it's inlined. LongSpider/3d-cube appears to hit this. * dfg/DFGAbstractInterpreterInlines.h: (JSC::DFG::::executeEffects): * dfg/DFGByteCodeParser.cpp: (JSC::DFG::ByteCodeParser::parseBlock): * dfg/DFGFixupPhase.cpp: (JSC::DFG::FixupPhase::fixupNode): * dfg/DFGRepatch.cpp: (JSC::DFG::emitPutTransitionStub): * dfg/DFGSafeToExecute.h: (JSC::DFG::SafeToExecuteEdge::operator()): * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::speculateFinalObject): (JSC::DFG::SpeculativeJIT::speculate): * dfg/DFGSpeculativeJIT.h: * dfg/DFGSpeculativeJIT32_64.cpp: (JSC::DFG::SpeculativeJIT::compile): * dfg/DFGSpeculativeJIT64.cpp: (JSC::DFG::SpeculativeJIT::compile): * dfg/DFGUseKind.cpp: (WTF::printInternal): * dfg/DFGUseKind.h: (JSC::DFG::typeFilterFor): (JSC::DFG::isCell): Canonical link: https://commits.webkit.org/138810@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@155201 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2013-09-06 19:01:21 +00:00			`PASS bar(5) is 42 on all iterations including after DFG tier-up.`
DFG CFG simplification should correct the variables at the head of the predecessor block https://bugs.webkit.org/show_bug.cgi?id=88284 Reviewed by Geoffrey Garen. Source/JavaScriptCore: * dfg/DFGCFGSimplificationPhase.cpp: (JSC::DFG::CFGSimplificationPhase::mergeBlocks): LayoutTests: * fast/js/dfg-constant-fold-first-local-read-after-block-merge-expected.txt: Added. * fast/js/dfg-constant-fold-first-local-read-after-block-merge.html: Added. * fast/js/script-tests/dfg-constant-fold-first-local-read-after-block-merge.js: Added. (foo): (bar): Canonical link: https://commits.webkit.org/106129@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@119464 268f45cc-cd09-0410-ab3c-d52691b4dbfc 2012-06-05 06:40:48 +00:00			`PASS successfullyParsed is true`

			`TEST COMPLETE`