|
| 1 | +2015-12-22 Filip Pizlo <fpizlo@apple.com> |
| 2 | + |
| 3 | + FTL B3 does not logicalNot correctly |
| 4 | + https://bugs.webkit.org/show_bug.cgi?id=152512 |
| 5 | + |
| 6 | + Reviewed by Saam Barati. |
| 7 | + |
| 8 | + I'm working on a bug where V8/richards does not run correctly. I noticed that the codegen was |
| 9 | + doing a log of Not32's followed by branches, which smelled like badness. To debug this, I |
| 10 | + needed B3's origins to dump as something other than a hexed pointer to a node. The node index |
| 11 | + would be better. So, I added the notion of an origin printer to Procedure. |
| 12 | + |
| 13 | + The bug was easy enough to fix. This introduces Output::logicalNot(). In LLVM, it's the same |
| 14 | + as bitNot(). In B3, it's compiled to Equal(value, 0). We could have also compiled it to |
| 15 | + BitXor(value, 1), except that B3 will strength-reduce to that anyway whenever it's safe. It's |
| 16 | + sort of nice that right now, you could use logicalNot() on non-bool values and get C-like |
| 17 | + behavior. |
| 18 | + |
| 19 | + Richards still doesn't run, though. There are more bugs! |
| 20 | + |
| 21 | + * JavaScriptCore.xcodeproj/project.pbxproj: |
| 22 | + * b3/B3BasicBlock.cpp: |
| 23 | + (JSC::B3::BasicBlock::dump): |
| 24 | + (JSC::B3::BasicBlock::deepDump): |
| 25 | + * b3/B3BasicBlock.h: |
| 26 | + (JSC::B3::BasicBlock::frequency): |
| 27 | + (JSC::B3::DeepBasicBlockDump::DeepBasicBlockDump): |
| 28 | + (JSC::B3::DeepBasicBlockDump::dump): |
| 29 | + (JSC::B3::deepDump): |
| 30 | + * b3/B3LowerToAir.cpp: |
| 31 | + (JSC::B3::Air::LowerToAir::run): |
| 32 | + (JSC::B3::Air::LowerToAir::lower): |
| 33 | + * b3/B3Origin.h: |
| 34 | + (JSC::B3::Origin::data): |
| 35 | + * b3/B3OriginDump.h: Added. |
| 36 | + (JSC::B3::OriginDump::OriginDump): |
| 37 | + (JSC::B3::OriginDump::dump): |
| 38 | + * b3/B3Procedure.cpp: |
| 39 | + (JSC::B3::Procedure::~Procedure): |
| 40 | + (JSC::B3::Procedure::printOrigin): |
| 41 | + (JSC::B3::Procedure::addBlock): |
| 42 | + (JSC::B3::Procedure::dump): |
| 43 | + * b3/B3Procedure.h: |
| 44 | + (JSC::B3::Procedure::setOriginPrinter): |
| 45 | + * b3/B3Value.cpp: |
| 46 | + (JSC::B3::Value::dumpChildren): |
| 47 | + (JSC::B3::Value::deepDump): |
| 48 | + * b3/B3Value.h: |
| 49 | + (JSC::B3::DeepValueDump::DeepValueDump): |
| 50 | + (JSC::B3::DeepValueDump::dump): |
| 51 | + (JSC::B3::deepDump): |
| 52 | + * ftl/FTLB3Output.cpp: |
| 53 | + (JSC::FTL::Output::lockedStackSlot): |
| 54 | + (JSC::FTL::Output::bitNot): |
| 55 | + (JSC::FTL::Output::logicalNot): |
| 56 | + (JSC::FTL::Output::load): |
| 57 | + * ftl/FTLB3Output.h: |
| 58 | + (JSC::FTL::Output::aShr): |
| 59 | + (JSC::FTL::Output::lShr): |
| 60 | + (JSC::FTL::Output::ctlz32): |
| 61 | + (JSC::FTL::Output::addWithOverflow32): |
| 62 | + (JSC::FTL::Output::lessThanOrEqual): |
| 63 | + (JSC::FTL::Output::doubleEqual): |
| 64 | + (JSC::FTL::Output::doubleEqualOrUnordered): |
| 65 | + (JSC::FTL::Output::doubleNotEqualOrUnordered): |
| 66 | + (JSC::FTL::Output::doubleLessThan): |
| 67 | + (JSC::FTL::Output::doubleLessThanOrEqual): |
| 68 | + (JSC::FTL::Output::doubleGreaterThan): |
| 69 | + (JSC::FTL::Output::doubleGreaterThanOrEqual): |
| 70 | + (JSC::FTL::Output::doubleNotEqualAndOrdered): |
| 71 | + (JSC::FTL::Output::doubleLessThanOrUnordered): |
| 72 | + (JSC::FTL::Output::doubleLessThanOrEqualOrUnordered): |
| 73 | + (JSC::FTL::Output::doubleGreaterThanOrUnordered): |
| 74 | + (JSC::FTL::Output::doubleGreaterThanOrEqualOrUnordered): |
| 75 | + (JSC::FTL::Output::isZero32): |
| 76 | + (JSC::FTL::Output::notZero32): |
| 77 | + (JSC::FTL::Output::addIncomingToPhi): |
| 78 | + (JSC::FTL::Output::bitCast): |
| 79 | + (JSC::FTL::Output::bitNot): Deleted. |
| 80 | + * ftl/FTLLowerDFGToLLVM.cpp: |
| 81 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileCheckArray): |
| 82 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileGetTypedArrayByteOffset): |
| 83 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileLogicalNot): |
| 84 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileCallOrConstruct): |
| 85 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileInstanceOfCustom): |
| 86 | + (JSC::FTL::DFG::LowerDFGToLLVM::compileCountExecution): |
| 87 | + (JSC::FTL::DFG::LowerDFGToLLVM::boolify): |
| 88 | + (JSC::FTL::DFG::LowerDFGToLLVM::isMisc): |
| 89 | + (JSC::FTL::DFG::LowerDFGToLLVM::isNotBoolean): |
| 90 | + (JSC::FTL::DFG::LowerDFGToLLVM::isBoolean): |
| 91 | + (JSC::FTL::DFG::LowerDFGToLLVM::unboxBoolean): |
| 92 | + (JSC::FTL::DFG::LowerDFGToLLVM::isNotType): |
| 93 | + (JSC::FTL::DFG::LowerDFGToLLVM::speculateObject): |
| 94 | + * ftl/FTLOutput.h: |
| 95 | + (JSC::FTL::Output::aShr): |
| 96 | + (JSC::FTL::Output::lShr): |
| 97 | + (JSC::FTL::Output::bitNot): |
| 98 | + (JSC::FTL::Output::logicalNot): |
| 99 | + (JSC::FTL::Output::insertElement): |
| 100 | + * ftl/FTLState.cpp: |
| 101 | + (JSC::FTL::State::State): |
| 102 | + |
1 | 103 | 2015-12-22 Keith Miller <keith_miller@apple.com> |
2 | 104 |
|
3 | 105 | Remove OverridesHasInstance from TypeInfoFlags |
|
0 commit comments