Index: src/compiler/js-typed-lowering.cc |
diff --git a/src/compiler/js-typed-lowering.cc b/src/compiler/js-typed-lowering.cc |
index 2fa4eb4fae72c7e54a9769b4f0451980ba1a708b..d8ddd93d3bb13538dafe6fafb3099ba1e3e81aab 100644 |
--- a/src/compiler/js-typed-lowering.cc |
+++ b/src/compiler/js-typed-lowering.cc |
@@ -587,6 +587,27 @@ Reduction JSTypedLowering::ReduceInt32Binop(Node* node, const Operator* intOp) { |
return r.ChangeToPureOperator(intOp, Type::Integral32()); |
} |
+Reduction JSTypedLowering::ReduceShiftLeft(Node* node) { |
+ if (flags() & kDisableIntegerBinaryOpReduction) return NoChange(); |
+ |
+ JSBinopReduction r(this, node); |
+ BinaryOperationHints::Hint feedback = r.GetNumberBinaryOperationFeedback(); |
+ if (feedback == BinaryOperationHints::kSigned32 || |
+ feedback == BinaryOperationHints::kSignedSmall) { |
+ return r.ChangeToSpeculativeOperator( |
+ simplified()->SpeculativeNumberShiftLeft(feedback), Type::Signed32()); |
+ } |
+ |
+ // If deoptimization is enabled we rely on type feedback. |
+ if (r.BothInputsAre(Type::PlainPrimitive()) || |
+ !(flags() & kDeoptimizationEnabled)) { |
+ r.ConvertInputsToNumber(); |
+ r.ConvertInputsToUI32(kSigned, kUnsigned); |
+ return r.ChangeToPureOperator(simplified()->NumberShiftLeft(), |
+ Type::Number()); |
+ } |
+ return NoChange(); |
+} |
Reduction JSTypedLowering::ReduceUI32Shift(Node* node, |
Signedness left_signedness, |
@@ -1943,7 +1964,7 @@ Reduction JSTypedLowering::Reduce(Node* node) { |
case IrOpcode::kJSBitwiseAnd: |
return ReduceInt32Binop(node, simplified()->NumberBitwiseAnd()); |
case IrOpcode::kJSShiftLeft: |
- return ReduceUI32Shift(node, kSigned, simplified()->NumberShiftLeft()); |
+ return ReduceShiftLeft(node); |
case IrOpcode::kJSShiftRight: |
return ReduceUI32Shift(node, kSigned, simplified()->NumberShiftRight()); |
case IrOpcode::kJSShiftRightLogical: |