DescriptionPPC/s390: [turbofan] Correct lazy deopt by {JSCreate} operation.
Port 6ee0b6cec6b83791af8d3a7e122f14e4eb376974
Original Commit Message:
This adds support for deoptimizing into the JSConstructStub after the
receiver instantiation but before the actual constructor invocation.
Such a deoptimization point is needed for cases where instantiation
might be observed (e.g. when new.target is a proxy) and hence might
trigger a deopt.
We use this new deoptimization point for the "after" frame-state the
inliner attaches to {JSCreate} nodes being inserted when constructor
calls are being inlined.
R=mstarzinger@chromium.org, joransiu@ca.ibm.com, jyan@ca.ibm.com, michael_dawson@ca.ibm.com
BUG=v8:5638
LOG=N
Review-Url: https://codereview.chromium.org/2690213002
Cr-Commit-Position: refs/heads/master@{#43171}
Committed: https://chromium.googlesource.com/v8/v8/+/2703b06e6f3e6a1bab4ab5c5e90034472d02423d
Patch Set 1 #
Messages
Total messages: 7 (3 generated)
|