Closed
Bug 782977
Opened 12 years ago
Closed 12 years ago
IonMonkey: Fix 3d-raytrace regression
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: jandem, Assigned: jandem)
Details
(Whiteboard: [ion:p1])
Attachments
(1 file)
3.50 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
This came in with the latest m-c merge. The problem is that if a lookup is uncacheable (in this case a missing property on a dense array), but we don't disable the IC, we were still inlining the shape in Ion. This patch changes things so that we only inline a monomorphic getprop/setprop in Ion if all lookups were cacheable.
Attachment #652117 -
Flags: review?(dvander)
Updated•12 years ago
|
Attachment #652117 -
Flags: review?(dvander) → review+
Updated•12 years ago
|
Whiteboard: [ion:p1]
Assignee | ||
Comment 1•12 years ago
|
||
https://hg.mozilla.org/projects/ionmonkey/rev/53474b3d98aa
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•