Andreas Kling a54e283901 LibJS: Fix two bugs in the GC fast rejection of possible pointers ...

- Convert to FlatPtr instead of doing pointer arithmetic on a too-large
  pointer type in find_min_and_max_block_addresses(). This makes the
  range more accurate.

- Untag possible cell pointers in add_possible_value() before doing the
  rejection. Otherwise we end up rejecting most pointers since the tags
  sit in the highest bits!

This fixes a crash when running the Speedometer benchmark.

2023-09-30 09:50:55 +02:00

23 KiB

Raw Blame History

View Raw