JavaScriptCore-7537.78.1/dfg/DFGSpeculativeJIT32_64.cpp

291             JITCompiler::JumpList slowCases;
292             slowCases.append(structureCheck.m_jump);
293             slowCases.append(slowPathTarget);
295                 slowCases, this, operationGetByIdOptimize,
307             JITCompiler::JumpList slowCases;
308             slowCases.append(structureCheck.m_jump);
309             slowCases.append(slowPathTarget);
311                 slowCases, this, operationGetByIdOptimize,
356         JITCompiler::JumpList slowCases;
357         slowCases.append(structureCheck.m_jump);
358         slowCases.append(slowPathTarget);
360             slowCases, this, optimizedCall, NoResult, valueTagGPR, valuePayloadGPR,
2552             MacroAssembler::JumpList slowCases;
2554             slowCases.append(m_jit.branch32(MacroAssembler::AboveOrEqual, propertyReg, MacroAssembler::Address(storageReg, Butterfly::offsetOfPublicLength())));
2558             slowCases.append(m_jit.branch32(MacroAssembler::Equal, resultTagReg, TrustedImm32(JSValue::EmptyValueTag)));
2562                     slowCases, this, operationGetByValArrayInt,
2614             MacroAssembler::JumpList slowCases;
2616             slowCases.append(m_jit.branch32(MacroAssembler::AboveOrEqual, propertyReg, MacroAssembler::Address(storageReg, Butterfly::offsetOfPublicLength())));
2619             slowCases.append(m_jit.branchDouble(MacroAssembler::DoubleNotEqualOrUnordered, tempReg, tempReg));
2624                     slowCases, this, operationGetByValArrayInt,
2678             JITCompiler::JumpList slowCases;
2679             slowCases.append(outOfBounds);
2680             slowCases.append(hole);
2683                     slowCases, this, operationGetByValArrayInt,
2841             MacroAssembler::JumpList slowCases;
2847                 slowCases.append(beyondArrayBounds);
2860                     slowCases.append(m_jit.jump());
2884             if (!slowCases.empty()) {
2887                         slowCases, this,
3571             MacroAssembler::JumpList slowCases;
3572             slowCases.append(m_jit.branch32(MacroAssembler::AboveOrEqual, sizeGPR, TrustedImm32(MIN_SPARSE_ARRAY_INDEX)));
3578             slowCases.append(
3582             emitAllocateJSObject<JSArray>(resultGPR, TrustedImmPtr(structure), storageGPR, scratchGPR, scratch2GPR, slowCases);
3602                     slowCases, this, operationNewArrayWithSize, resultGPR,