1154714 - Inlining of Atomics.store should not consider the inline return context

Status: RESOLVED FIXED

(Core :: JavaScript Engine: JIT, defect)

Description

[Lars T Hansen [:lth]]

The Atomics methods are inlined if they meet certain preconditions, and those preconditions currently always take into account the return type context.  Notably for Uint32 the return type context must be double (see also bug 1077035).  In any case, for Atomics.store the return type context is irrelevant, because the value that's returned from Atomics.store is the value that's the third argument, not some value that was read from the array.  So we should not check the return type context.

Comment 1

[Lars T Hansen [:lth]]

Er, that would be bug 1077305.

Comment 2

[Lars T Hansen [:lth]]

Attachment: Disable checking the inline return type when not relevant

The existing test here, that the inline return type for the Int8..Int32 array types is MIRType_Int32, is almost certainly redundant but I left it in for now, as it's not the focus of this bug.

Comment 3

[Benjamin Bouvier [:bbouvier] (inactive)]

Comment on attachment 8592812 [details] [diff] [review]
Disable checking the inline return type when not relevant

Review of attachment 8592812 [details] [diff] [review]:
-----------------------------------------------------------------

Looks good, sorry for the long review time.

::: js/src/jit/IonBuilder.h
@@ +896,5 @@
> +        DoCheckAtomicResult
> +    };
> +
> +    bool atomicsMeetsPreconditions(CallInfo& callInfo, Scalar::Type* arrayElementType,
> +                                   AtomicCheckResult=DoCheckAtomicResult);

Can you put the in/out argument at the last position, please?

Comment 4

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/3ff53c56babc

Comment 5

[Lars T Hansen [:lth]]

The review comment has been addressed in that patch :)

Comment 6

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/3ff53c56babc