зеркало из https://github.com/mozilla/gecko-dev.git
e67d8e1da9
I tried to compare BaselineCacheIRCompiler::emitArrayPush and CodeGenerator::emitArrayPush to make sure I didn't miss any implicit guards. It seems like the Ion inline path is actually more limited though. MArrayPush is typed in Ion to return Int32, that is however not really true, because array.length can overflow INT32_MAX. Ion currently handles this via TI invalidation. For simplicity I decided to instead add a bailout before we even try to push. In the future we should look into some approach that doesn't require invalidation to handle this. Differential Revision: https://phabricator.services.mozilla.com/D75926 |
||
|---|---|---|
| .. | ||
| ductwork/debugger | ||
| examples | ||
| ipc | ||
| public | ||
| rust | ||
| src | ||
| xpconnect | ||
| app.mozbuild | ||
| ffi.configure | ||
| moz.build | ||
| moz.configure | ||
| sub.configure | ||