Closed
Bug 714686
Opened 12 years ago
Closed 12 years ago
IonMonkey: Unbox OSR Values.
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: nbp, Assigned: nbp)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
1.82 KB,
patch
|
sstangl
:
review+
bhackett1024
:
review+
|
Details | Diff | Splinter Review |
OSR entry point are currently generating MIRType_Value. The problem is that OSR will be merged with other entry points for which we may have specialized the type. Phi nodes of the loop header are then discarding the most specialized value and keep the MIRType_Value instead. Thus the loop will have to unbox/box at each loop iteration. We cannot rely on the ArgTypes and ThisTypes because they refer to the function entry and not to the loop header. MethodJIT stores a vector of type for arg/local slots (naming ActiveFrame::varTypes), one similar solution for IonMonkey would be to re-use the slots types of any other entry point (MBasicBlock) of the loop, to produce fallible unboxing for OSR entry point.
Assignee | ||
Updated•12 years ago
|
Assignee: general → nicolas.b.pierron
Status: NEW → ASSIGNED
Assignee | ||
Comment 1•12 years ago
|
||
Copy types from the main-line as fallible assumptions for OSR entry-points.
Attachment #586749 -
Flags: review?(sstangl)
Attachment #586749 -
Flags: review?(bhackett1024)
Updated•12 years ago
|
Attachment #586749 -
Flags: review?(bhackett1024) → review+
Comment 2•12 years ago
|
||
Comment on attachment 586749 [details] [diff] [review] Unbox OSR Value before preheader Review of attachment 586749 [details] [diff] [review]: ----------------------------------------------------------------- Looks good.
Attachment #586749 -
Flags: review?(sstangl) → review+
Assignee | ||
Comment 3•12 years ago
|
||
https://hg.mozilla.org/projects/ionmonkey/rev/fedf408a1cf3
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•