Some follow-up changes for bug 1715512
Categories
(Core :: JavaScript Engine, task, P3)
Tracking
()
Tracking | Status | |
---|---|---|
firefox91 | --- | fixed |
People
(Reporter: jandem, Assigned: jandem)
References
Details
Attachments
(6 files)
Assignee | ||
Comment 1•3 years ago
|
||
Assignee | ||
Comment 2•3 years ago
|
||
Depends on D118459
Assignee | ||
Comment 3•3 years ago
|
||
This simplifies the callers. Eventually replaceShape could be moved to SharedShape.
Depends on D118460
Assignee | ||
Comment 4•3 years ago
|
||
This was a footgun because the argument defaults to GENERATE_NONE, meaning it can change
a dictionary shape's object flags without allocating a new shape.
We don't rely on this anywhere for perf reasons so it's simpler and safer to always
allocate a new shape.
Depends on D118461
Assignee | ||
Comment 5•3 years ago
|
||
It's better to clear the Indexed flag in densifySparseElements directly, so that
we don't need to immediately allocate a new shape.
Depends on D118462
Assignee | ||
Comment 6•3 years ago
|
||
The lastProperty name no longer makes sense for the shape now that properties
are stored separately.
Depends on D118463
Comment 8•3 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/2139ba84a1fe
https://hg.mozilla.org/mozilla-central/rev/2bd82ca65e09
https://hg.mozilla.org/mozilla-central/rev/b074f6287b26
https://hg.mozilla.org/mozilla-central/rev/a78b62f28c6a
https://hg.mozilla.org/mozilla-central/rev/bb1dcb7d3777
https://hg.mozilla.org/mozilla-central/rev/7a0639221c99
Description
•