Closed Bug 782977 Opened 12 years ago Closed 12 years ago

IonMonkey: Fix 3d-raytrace regression

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: jandem)

Details

(Whiteboard: [ion:p1])

Attachments

(1 file)

Attached patch PatchSplinter Review
This came in with the latest m-c merge. The problem is that if a lookup is uncacheable (in this case a missing property on a dense array), but we don't disable the IC, we were still inlining the shape in Ion.

This patch changes things so that we only inline a monomorphic getprop/setprop in Ion if all lookups were cacheable.
Attachment #652117 - Flags: review?(dvander)
Attachment #652117 - Flags: review?(dvander) → review+
https://hg.mozilla.org/projects/ionmonkey/rev/53474b3d98aa
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.