Closed Bug 1069260 Opened 5 years ago Closed 5 years ago

IonMonkey: Folds FunctionEnvironment to the scope chain of the lambdas.

Categories

(Core :: JavaScript Engine: JIT, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
mozilla35

People

(Reporter: nbp, Assigned: nbp)

Details

Attachments

(1 file)

When we are calling inner functions we produce the following kind of code:

  11 NewCallObject
   * StoreFixedSlot 11 …
  15 Lambda 11

  -- inlined inner function
  22 FunctionEnvironment 15
   * LoadFixedSlot 22 …

These loads are not folded to the corresponding store values because the function environment is not folded to the NewCallObject.
Attachment #8491430 - Flags: review?(sunfish)
Attachment #8491430 - Flags: review?(sunfish) → review+
https://hg.mozilla.org/mozilla-central/rev/0347aeb7f39b
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla35
You need to log in before you can comment on or make changes to this bug.