← WebKit — 2026-W35
96b1030b8df45a6799b4e4bc1f354287c20e56c8 [JSC] Make Air Greedy RegAlloc faster
not a security fix
confidence 0.15
signal score 8.57
Source/JavaScriptCore/b3
Classified as not security-relevant.
Triage note: Switches forEachArg to forEachTmpFast with an airValidateGreedRegAlloc()-gated cross-check, caches clobber sites, and fixes PrintSpecial::forEachArg/generate (report printed Tmps, handle FPR). PrintSpecial is debug-only; the rest is refactor plus validation instrumentation, not an attacker-reachable fix.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Switches forEachArg to forEachTmpFast with an airValidateGreedRegAlloc()-gated cross-check, caches clobber sites, and fixes PrintSpecial::forEachArg/generate (report printed Tmps, handle FPR). PrintSpecial is debug-only; the rest is refactor plus validation instrumentation, not an attacker-reachable fix.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: security_assert (+4.87), null_guard (+1.2), area:Source/JavaScriptCore/b3 (+2.5)
Before / after
Loading diff…
On This Page