Closed Bug 636598 Opened 9 years ago Closed 9 years ago

TypeInference: allow jumps from synced state to loop heads

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set

Tracking

()

RESOLVED FIXED

People

(Reporter: bhackett, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: fixed-in-jaegermonkey)

TI/JM's register allocator requires a specific register state at loop heads, which a synced state may not satisfy.  For loops we should emit trampolines to load slots into the appropriate registers and allow the intepreter to transition into JIT code at such points.
This fix emits trampolines loading the appropriate registers for loop heads, ensuring that all loop heads have entries in a JITScript's nmap and can be joined into from the interpreter.

http://hg.mozilla.org/projects/jaegermonkey/rev/8b03f0698742
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Whiteboard: fixed-in-jaegermonkey
You need to log in before you can comment on or make changes to this bug.