[webkit-changes] [206472] trunk

Title: [206472] trunk Revision 206472 Author fpi...@apple.com Date 2016-09-27 16:54:28 -0700 (Tue, 27 Sep 2016) Log Message B3::lowerMacros forgets to before->updatePredecessorsAfter() when lowering ChillMod on ARM64 https://bugs.webkit.org/show_bug.cgi?id=162644 Reviewed by Keith

[webkit-changes] [206344] trunk/Source

Title: [206344] trunk/Source Revision 206344 Author fpi...@apple.com Date 2016-09-23 17:47:30 -0700 (Fri, 23 Sep 2016) Log Message Need a store-load fence between setting cell state and visiting the object in SlotVisitor https://bugs.webkit.org/show_bug.cgi?id=162354 Reviewed by Mark

[webkit-changes] [206319] trunk/Source/JavaScriptCore

Title: [206319] trunk/Source/_javascript_Core Revision 206319 Author fpi...@apple.com Date 2016-09-23 12:31:11 -0700 (Fri, 23 Sep 2016) Log Message Unreviewed, fix all other builds. * assembler/AbstractMacroAssembler.h: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [206316] trunk/Source/JavaScriptCore

Title: [206316] trunk/Source/_javascript_Core Revision 206316 Author fpi...@apple.com Date 2016-09-23 11:47:41 -0700 (Fri, 23 Sep 2016) Log Message Unreviewed, fix cloop. * assembler/AbstractMacroAssembler.h: * heap/SlotVisitor.cpp: Modified Paths

[webkit-changes] [206314] trunk/Source

Title: [206314] trunk/Source Revision 206314 Author fpi...@apple.com Date 2016-09-23 11:09:44 -0700 (Fri, 23 Sep 2016) Log Message Source/_javascript_Core: Need a store-load fence between setting cell state and visiting the object in SlotVisitor

[webkit-changes] [206274] trunk/Source

Title: [206274] trunk/Source Revision 206274 Author fpi...@apple.com Date 2016-09-22 14:11:42 -0700 (Thu, 22 Sep 2016) Log Message Fences on x86 should be a lot cheaper https://bugs.webkit.org/show_bug.cgi?id=162417 Reviewed by Mark Lam and Geoffrey Garen. Source/_javascript_Core: It

[webkit-changes] [206226] trunk

Title: [206226] trunk Revision 206226 Author fpi...@apple.com Date 2016-09-21 12:09:24 -0700 (Wed, 21 Sep 2016) Log Message Add a Fence opcode to B3 https://bugs.webkit.org/show_bug.cgi?id=162343 Reviewed by Geoffrey Garen. Source/_javascript_Core: This adds the most basic

[webkit-changes] [206183] trunk/Source/JavaScriptCore

Title: [206183] trunk/Source/_javascript_Core Revision 206183 Author fpi...@apple.com Date 2016-09-20 15:57:16 -0700 (Tue, 20 Sep 2016) Log Message DFG::StoreBarrierInsertionPhase should assume that any epoch increment may make objects older https://bugs.webkit.org/show_bug.cgi?id=162319

[webkit-changes] [206172] trunk/Source/JavaScriptCore

Title: [206172] trunk/Source/_javascript_Core Revision 206172 Author fpi...@apple.com Date 2016-09-20 14:04:06 -0700 (Tue, 20 Sep 2016) Log Message Rename MarkedSpace::version/MarkedBlock::version to MarkedSpace::markingVersion/MarkedBlock::markingVersion

[webkit-changes] [206160] trunk/Source/JavaScriptCore

Title: [206160] trunk/Source/_javascript_Core Revision 206160 Author fpi...@apple.com Date 2016-09-20 11:35:24 -0700 (Tue, 20 Sep 2016) Log Message Unreviewed, fix cloop build. * runtime/VM.h: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [205998] trunk/Source/JavaScriptCore

Title: [205998] trunk/Source/_javascript_Core Revision 205998 Author fpi...@apple.com Date 2016-09-15 15:01:37 -0700 (Thu, 15 Sep 2016) Log Message REGRESSION (r205462): Lot of leaks https://bugs.webkit.org/show_bug.cgi?id=161946 Reviewed by Saam Barati. We were forgetting to

[webkit-changes] [205979] trunk/Source/JavaScriptCore

Title: [205979] trunk/Source/_javascript_Core Revision 205979 Author fpi...@apple.com Date 2016-09-15 10:17:07 -0700 (Thu, 15 Sep 2016) Log Message There is no good reason for WeakBlock to care about newly allocated objects https://bugs.webkit.org/show_bug.cgi?id=162006 Reviewed by

[webkit-changes] [205925] trunk/Source/JavaScriptCore

Title: [205925] trunk/Source/_javascript_Core Revision 205925 Author fpi...@apple.com Date 2016-09-14 13:41:31 -0700 (Wed, 14 Sep 2016) Log Message Remove Heap::setMarked() Rubber stamped by Keith Miller. Nobody uses this function. * heap/Heap.h: * heap/HeapInlines.h:

[webkit-changes] [205886] trunk/Source/JavaScriptCore

Title: [205886] trunk/Source/_javascript_Core Revision 205886 Author fpi...@apple.com Date 2016-09-13 16:19:48 -0700 (Tue, 13 Sep 2016) Log Message Remove Heap::isLive() https://bugs.webkit.org/show_bug.cgi?id=161933 Reviewed by Mark Lam. Before I put any more effort into

[webkit-changes] [205859] trunk/Source/WTF

Title: [205859] trunk/Source/WTF Revision 205859 Author fpi...@apple.com Date 2016-09-13 08:59:25 -0700 (Tue, 13 Sep 2016) Log Message ParkingLot is going to have a bad time with threads dying https://bugs.webkit.org/show_bug.cgi?id=161893 Reviewed by Michael Saboff. If a

[webkit-changes] [205850] trunk/Source/JavaScriptCore

Title: [205850] trunk/Source/_javascript_Core Revision 205850 Author fpi...@apple.com Date 2016-09-12 21:33:19 -0700 (Mon, 12 Sep 2016) Log Message MarkedBlock should be able to use flipIfNecessary() as the "I'm not empty" trigger https://bugs.webkit.org/show_bug.cgi?id=161869 Reviewed

[webkit-changes] [205810] trunk/Source

Title: [205810] trunk/Source Revision 205810 Author fpi...@apple.com Date 2016-09-12 09:08:52 -0700 (Mon, 12 Sep 2016) Log Message DFG::forAllKilledOperands() could use a faster bitvector scan in the same-inline-stack fast path https://bugs.webkit.org/show_bug.cgi?id=161849 Reviewed by

[webkit-changes] [205794] trunk/Source

Title: [205794] trunk/Source Revision 205794 Author fpi...@apple.com Date 2016-09-11 21:03:36 -0700 (Sun, 11 Sep 2016) Log Message FastBitVector should have efficient and easy-to-use vector-vector operations https://bugs.webkit.org/show_bug.cgi?id=161847 Reviewed by Saam Barati.

[webkit-changes] [205767] trunk/Source/JavaScriptCore

Title: [205767] trunk/Source/_javascript_Core Revision 205767 Author fpi...@apple.com Date 2016-09-09 14:20:02 -0700 (Fri, 09 Sep 2016) Log Message jsc.cpp should call initializeMainThread() to make sure that GC thread assertions work https://bugs.webkit.org/show_bug.cgi?id=161801

[webkit-changes] [205746] trunk/Source/JavaScriptCore

Title: [205746] trunk/Source/_javascript_Core Revision 205746 Author fpi...@apple.com Date 2016-09-09 09:50:10 -0700 (Fri, 09 Sep 2016) Log Message HashMapImpl needs to m_buffer.clear() in its constructor https://bugs.webkit.org/show_bug.cgi?id=161796 Reviewed by Keith Miller.

[webkit-changes] [205683] trunk/Source

Title: [205683] trunk/Source Revision 205683 Author fpi...@apple.com Date 2016-09-08 18:22:05 -0700 (Thu, 08 Sep 2016) Log Message Heap::isMarked() shouldn't pay the price of concurrent lazy flipping https://bugs.webkit.org/show_bug.cgi?id=161760 Reviewed by Mark Lam.

[webkit-changes] [205658] trunk/Source/JavaScriptCore

Title: [205658] trunk/Source/_javascript_Core Revision 205658 Author fpi...@apple.com Date 2016-09-08 13:35:55 -0700 (Thu, 08 Sep 2016) Log Message Heap version should be 32-bit https://bugs.webkit.org/show_bug.cgi?id=161751 Reviewed by Mark Lam. 32-bit devices are probably

[webkit-changes] [205654] trunk/Source

Title: [205654] trunk/Source Revision 205654 Author fpi...@apple.com Date 2016-09-08 11:59:02 -0700 (Thu, 08 Sep 2016) Log Message Move JSMap/JSSet over to Auxiliary MarkedSpace https://bugs.webkit.org/show_bug.cgi?id=161744 Reviewed by Saam Barati. Source/_javascript_Core:

[webkit-changes] [205648] trunk/Source/JavaScriptCore

Title: [205648] trunk/Source/_javascript_Core Revision 205648 Author fpi...@apple.com Date 2016-09-08 09:47:34 -0700 (Thu, 08 Sep 2016) Log Message Typed arrays should use MarkedSpace instead of CopiedSpace https://bugs.webkit.org/show_bug.cgi?id=161100 Reviewed by Geoffrey Garen.

[webkit-changes] [205566] trunk/Source/JavaScriptCore

Title: [205566] trunk/Source/_javascript_Core Revision 205566 Author fpi...@apple.com Date 2016-09-07 13:21:46 -0700 (Wed, 07 Sep 2016) Log Message Make emitAllocateWithNonNullAllocator's sub32() disallow-scratch-friendly https://bugs.webkit.org/show_bug.cgi?id=161706 Reviewed by

[webkit-changes] [205494] trunk/Source/JavaScriptCore

Title: [205494] trunk/Source/_javascript_Core Revision 205494 Author fpi...@apple.com Date 2016-09-06 11:18:10 -0700 (Tue, 06 Sep 2016) Log Message Typed arrays should use MarkedSpace instead of CopiedSpace https://bugs.webkit.org/show_bug.cgi?id=161100 Reviewed by Geoffrey Garen.

[webkit-changes] [205466] trunk/Source/JavaScriptCore

Title: [205466] trunk/Source/_javascript_Core Revision 205466 Author fpi...@apple.com Date 2016-09-05 19:39:11 -0700 (Mon, 05 Sep 2016) Log Message Heap::isMarked() should use concurrent lazy flipping https://bugs.webkit.org/show_bug.cgi?id=161613 Reviewed by Michael Catanzaro. I found

[webkit-changes] [205465] trunk/Source/JavaScriptCore

Title: [205465] trunk/Source/_javascript_Core Revision 205465 Author fpi...@apple.com Date 2016-09-05 19:16:03 -0700 (Mon, 05 Sep 2016) Log Message Unreviewed, reset generator test results after the butterflies. *

[webkit-changes] [205463] trunk/Source/JavaScriptCore

Title: [205463] trunk/Source/_javascript_Core Revision 205463 Author fpi...@apple.com Date 2016-09-05 18:11:19 -0700 (Mon, 05 Sep 2016) Log Message Unreviewed, fix cloop build. * bytecode/SuperSampler.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [205304] trunk

Title: [205304] trunk Revision 205304 Author fpi...@apple.com Date 2016-09-01 11:55:50 -0700 (Thu, 01 Sep 2016) Log Message ObjectAllocationSinkingPhase::insertOSRHintsForUpdate() fails to emit updated hints in some cases https://bugs.webkit.org/show_bug.cgi?id=161492 Reviewed by Mark

[webkit-changes] [204901] trunk

Title: [204901] trunk Revision 204901 Author fpi...@apple.com Date 2016-08-24 09:55:50 -0700 (Wed, 24 Aug 2016) Log Message js/regress/put-by-id-transition-with-indexing-header.html and svg/carto.net/window.svg fail in debug after r204854 https://bugs.webkit.org/show_bug.cgi?id=161115

[webkit-changes] [204897] trunk/Source/JavaScriptCore

Title: [204897] trunk/Source/_javascript_Core Revision 204897 Author fpi...@apple.com Date 2016-08-24 09:23:41 -0700 (Wed, 24 Aug 2016) Log Message AssemblyHelpers::emitAllocateWithNonNullAllocator() crashes in the FTL on ARM64 https://bugs.webkit.org/show_bug.cgi?id=161138

[webkit-changes] [204866] trunk/Source/JavaScriptCore

Title: [204866] trunk/Source/_javascript_Core Revision 204866 Author fpi...@apple.com Date 2016-08-23 16:19:14 -0700 (Tue, 23 Aug 2016) Log Message REGRESSION(204854): ASan is unhappy https://bugs.webkit.org/show_bug.cgi?id=161109 Reviewed by Geoffrey Garen. I messed up

[webkit-changes] [204857] trunk/Source/JavaScriptCore

Title: [204857] trunk/Source/_javascript_Core Revision 204857 Author fpi...@apple.com Date 2016-08-23 13:43:56 -0700 (Tue, 23 Aug 2016) Log Message Spilling of constant tmps should make it easier for the spill code optimizer to rematerialize the constant

[webkit-changes] [204856] trunk/Source/JavaScriptCore

Title: [204856] trunk/Source/_javascript_Core Revision 204856 Author fpi...@apple.com Date 2016-08-23 13:29:35 -0700 (Tue, 23 Aug 2016) Log Message Unreviewed, fix CLoop build. This fixes the CLoop build while still ensuring that Interpreter.h is a project header. *

[webkit-changes] [204093] trunk

Title: [204093] trunk Revision 204093 Author fpi...@apple.com Date 2016-08-03 11:50:57 -0700 (Wed, 03 Aug 2016) Log Message REGRESSION(r203368): broke some test262 tests https://bugs.webkit.org/show_bug.cgi?id=160479 Reviewed by Mark Lam. JSTests: Added a stress test for this

[webkit-changes] [204060] trunk/Tools

Title: [204060] trunk/Tools Revision 204060 Author fpi...@apple.com Date 2016-08-02 18:57:45 -0700 (Tue, 02 Aug 2016) Log Message run-_javascript_core-tests should accept multiple --extra-tests https://bugs.webkit.org/show_bug.cgi?id=160486 Reviewed by Saam Barati. We want to

[webkit-changes] [204010] trunk/Source/JavaScriptCore

Title: [204010] trunk/Source/_javascript_Core Revision 204010 Author fpi...@apple.com Date 2016-08-01 22:38:58 -0700 (Mon, 01 Aug 2016) Log Message REGRESSION (r203990): JSC Debug test stress/arity-check-ftl-throw.js failing https://bugs.webkit.org/show_bug.cgi?id=160438 Reviewed by

[webkit-changes] [203996] trunk/Source/JavaScriptCore

Title: [203996] trunk/Source/_javascript_Core Revision 203996 Author fpi...@apple.com Date 2016-08-01 16:22:15 -0700 (Mon, 01 Aug 2016) Log Message [B3] Fusing immediates into test instructions should work again https://bugs.webkit.org/show_bug.cgi?id=160073 Reviewed by Sam Weinig.

[webkit-changes] [203990] trunk

Title: [203990] trunk Revision 203990 Author fpi...@apple.com Date 2016-08-01 15:20:49 -0700 (Mon, 01 Aug 2016) Log Message Rationalize varargs stack overflow checks https://bugs.webkit.org/show_bug.cgi?id=160425 Reviewed by Michael Saboff. * ftl/FTLLink.cpp: (JSC::FTL::link):

[webkit-changes] [203699] trunk/Source/JavaScriptCore

Title: [203699] trunk/Source/_javascript_Core Revision 203699 Author fpi...@apple.com Date 2016-07-25 14:03:35 -0700 (Mon, 25 Jul 2016) Log Message AssemblyHelpers should own all of the cell allocation methods https://bugs.webkit.org/show_bug.cgi?id=160171 Reviewed by Saam Barati.

[webkit-changes] [203670] trunk

Title: [203670] trunk Revision 203670 Author fpi...@apple.com Date 2016-07-24 13:33:40 -0700 (Sun, 24 Jul 2016) Log Message B3 should support multiple entrypoints https://bugs.webkit.org/show_bug.cgi?id=159391 Reviewed by Saam Barati. Source/_javascript_Core: This teaches B3

[webkit-changes] [203668] trunk/Source/JavaScriptCore

Title: [203668] trunk/Source/_javascript_Core Revision 203668 Author fpi...@apple.com Date 2016-07-24 11:59:29 -0700 (Sun, 24 Jul 2016) Log Message Unreviewed, fix broken test. I don't know why I goofed this up without seeing it before landing. * b3/air/AirOpcode.opcodes: *

[webkit-changes] [203666] trunk/Source/JavaScriptCore

Title: [203666] trunk/Source/_javascript_Core Revision 203666 Author fpi...@apple.com Date 2016-07-24 10:36:43 -0700 (Sun, 24 Jul 2016) Log Message [B3] Fusing immediates into test instructions should work again https://bugs.webkit.org/show_bug.cgi?id=160073 Reviewed by Sam Weinig.

[webkit-changes] [203621] trunk/Source/JavaScriptCore

Title: [203621] trunk/Source/_javascript_Core Revision 203621 Author fpi...@apple.com Date 2016-07-22 15:14:44 -0700 (Fri, 22 Jul 2016) Log Message Teach MarkedSpace how to allocate auxiliary storage https://bugs.webkit.org/show_bug.cgi?id=160053 Reviewed by Sam Weinig.

[webkit-changes] [203491] trunk

Title: [203491] trunk Revision 203491 Author fpi...@apple.com Date 2016-07-20 23:23:10 -0700 (Wed, 20 Jul 2016) Log Message Switching on symbols should be fast https://bugs.webkit.org/show_bug.cgi?id=158892 Reviewed by Keith Miller. Source/_javascript_Core: This does two

[webkit-changes] [203488] trunk/Source/JavaScriptCore

Title: [203488] trunk/Source/_javascript_Core Revision 203488 Author fpi...@apple.com Date 2016-07-20 22:24:54 -0700 (Wed, 20 Jul 2016) Log Message FTL snippet generators should be able to request a different register for output and input https://bugs.webkit.org/show_bug.cgi?id=160010

[webkit-changes] [203440] trunk

Title: [203440] trunk Revision 203440 Author fpi...@apple.com Date 2016-07-19 18:45:25 -0700 (Tue, 19 Jul 2016) Log Message The default testing mode should not involve disabling the FTL JIT https://bugs.webkit.org/show_bug.cgi?id=159929 Rubber stamped by Mark Lam and Saam Barati.

[webkit-changes] [203416] trunk/Source/JavaScriptCore

Title: [203416] trunk/Source/_javascript_Core Revision 203416 Author fpi...@apple.com Date 2016-07-19 13:15:51 -0700 (Tue, 19 Jul 2016) Log Message REGRESSION (r203348-r203368): ASSERTION FAILED: from.isCell() && from.asCell()->JSCell::inherits(std::remove_pointer::type::info())

[webkit-changes] [203413] trunk/Source/JavaScriptCore

Title: [203413] trunk/Source/_javascript_Core Revision 203413 Author fpi...@apple.com Date 2016-07-19 12:20:02 -0700 (Tue, 19 Jul 2016) Log Message B3 methods that mutate the successors array should take FrequentedBlock by value https://bugs.webkit.org/show_bug.cgi?id=159935 Reviewed by

[webkit-changes] [203375] trunk/Source/JavaScriptCore

Title: [203375] trunk/Source/_javascript_Core Revision 203375 Author fpi...@apple.com Date 2016-07-18 14:33:45 -0700 (Mon, 18 Jul 2016) Log Message MarkedBlocks should know that they can be used for more than JSCells https://bugs.webkit.org/show_bug.cgi?id=159643 Reviewed by Geoffrey

[webkit-changes] [203368] trunk

Title: [203368] trunk Revision 203368 Author fpi...@apple.com Date 2016-07-18 13:12:45 -0700 (Mon, 18 Jul 2016) Log Message Object.preventExtensions/seal/freeze makes code much slower https://bugs.webkit.org/show_bug.cgi?id=143247 Reviewed by Michael Saboff.

[webkit-changes] [203365] trunk/Source

Title: [203365] trunk/Source Revision 203365 Author fpi...@apple.com Date 2016-07-18 12:51:45 -0700 (Mon, 18 Jul 2016) Log Message RegisterSet should use a Bitmap instead of a BitVector so that it never allocates memory and is trivial to copy

[webkit-changes] [203364] trunk

Title: [203364] trunk Revision 203364 Author fpi...@apple.com Date 2016-07-18 12:32:34 -0700 (Mon, 18 Jul 2016) Log Message DFG and FTL should support op_call_eval https://bugs.webkit.org/show_bug.cgi?id=159786 Reviewed by Saam Barati. Source/_javascript_Core: This adds

[webkit-changes] [203361] trunk

Title: [203361] trunk Revision 203361 Author fpi...@apple.com Date 2016-07-18 12:12:57 -0700 (Mon, 18 Jul 2016) Log Message DFG should really support jneq_ptr https://bugs.webkit.org/show_bug.cgi?id=159700 Reviewed by Keith Miller. Source/_javascript_Core: Prior to this

[webkit-changes] [203356] trunk

Title: [203356] trunk Revision 203356 Author fpi...@apple.com Date 2016-07-18 11:55:31 -0700 (Mon, 18 Jul 2016) Log Message OSR entry into DFG has problems with lexical scoping https://bugs.webkit.org/show_bug.cgi?id=159687 Reviewed by Saam Barati. Source/_javascript_Core:

[webkit-changes] [203350] trunk

Title: [203350] trunk Revision 203350 Author fpi...@apple.com Date 2016-07-18 11:32:52 -0700 (Mon, 18 Jul 2016) Log Message WTF::Lock should be fair eventually https://bugs.webkit.org/show_bug.cgi?id=159384 Reviewed by Geoffrey Garen. Source/WTF: In

[webkit-changes] [203336] trunk/Source/JavaScriptCore

Title: [203336] trunk/Source/_javascript_Core Revision 203336 Author fpi...@apple.com Date 2016-07-17 15:00:42 -0700 (Sun, 17 Jul 2016) Log Message DFG CSE is broken for MultiGetByOffset https://bugs.webkit.org/show_bug.cgi?id=159858 Reviewed by Saam Barati. This disabled CSE

[webkit-changes] [203141] trunk

Title: [203141] trunk Revision 203141 Author fpi...@apple.com Date 2016-07-12 17:05:25 -0700 (Tue, 12 Jul 2016) Log Message platformUserPreferredLanguages on Mac should not try to put the region into the language https://bugs.webkit.org/show_bug.cgi?id=159693 Rubber stamped by Alexey

[webkit-changes] [203034] trunk/Source/JavaScriptCore

Title: [203034] trunk/Source/_javascript_Core Revision 203034 Author fpi...@apple.com Date 2016-07-09 14:07:45 -0700 (Sat, 09 Jul 2016) Log Message REGRESSION(201900): validation failure for GetByOffset/PutByOffset in VALIDATE((node), node->child1().node() == node->child2().node() ||

[webkit-changes] [202792] trunk/Source/JavaScriptCore

Title: [202792] trunk/Source/_javascript_Core Revision 202792 Author fpi...@apple.com Date 2016-07-03 12:34:55 -0700 (Sun, 03 Jul 2016) Log Message FTL should refer to B3 types directly https://bugs.webkit.org/show_bug.cgi?id=159389 Reviewed by Saam Barati. When we used LLVM,

[webkit-changes] [202791] trunk/Source/WTF

Title: [202791] trunk/Source/WTF Revision 202791 Author fpi...@apple.com Date 2016-07-03 10:47:51 -0700 (Sun, 03 Jul 2016) Log Message Ugh. Once again, unreviewed, roll out unintentional commit in r202790. * benchmarks/LockFairnessTest.cpp: (main): Modified Paths

[webkit-changes] [202790] trunk/Source

Title: [202790] trunk/Source Revision 202790 Author fpi...@apple.com Date 2016-07-03 10:46:39 -0700 (Sun, 03 Jul 2016) Log Message DFG LICM needs to go all-in on the idea that some loops can't be LICMed https://bugs.webkit.org/show_bug.cgi?id=159388 Reviewed by Mark Lam. Some

[webkit-changes] [202781] trunk/Source/WTF

Title: [202781] trunk/Source/WTF Revision 202781 Author fpi...@apple.com Date 2016-07-02 10:47:52 -0700 (Sat, 02 Jul 2016) Log Message Unreviewed, roll back unintentional commit in r202778. * benchmarks/LockFairnessTest.cpp: (main): Modified Paths trunk/Source/WTF/ChangeLog

[webkit-changes] [202778] trunk/Source

Title: [202778] trunk/Source Revision 202778 Author fpi...@apple.com Date 2016-07-02 10:43:56 -0700 (Sat, 02 Jul 2016) Log Message Scopes that are not under TDZ should still push their variables onto the TDZ stack so that lifting TDZ doesn't bypass that scope

[webkit-changes] [202689] trunk

Title: [202689] trunk Revision 202689 Author fpi...@apple.com Date 2016-06-30 11:13:26 -0700 (Thu, 30 Jun 2016) Log Message Generators violate bytecode liveness validation https://bugs.webkit.org/show_bug.cgi?id=159279 Reviewed by Yusuke Suzuki. PerformanceTests: Add Basic to our test

[webkit-changes] [202613] trunk/PerformanceTests

Title: [202613] trunk/PerformanceTests Revision 202613 Author fpi...@apple.com Date 2016-06-28 22:55:37 -0700 (Tue, 28 Jun 2016) Log Message ES6SampleBench should have a harness https://bugs.webkit.org/show_bug.cgi?id=159246 Reviewed by Saam Barati. This adds a simple web

[webkit-changes] [202594] trunk/Tools

Title: [202594] trunk/Tools Revision 202594 Author fpi...@apple.com Date 2016-06-28 15:16:19 -0700 (Tue, 28 Jun 2016) Log Message Unreviewed, fix JSC tests. Air.js moved, and the harness needs to know. * Scripts/run-_javascript_core-tests: (runJSCStressTests): Modified Paths

[webkit-changes] [202591] trunk/PerformanceTests

Title: [202591] trunk/PerformanceTests Revision 202591 Author fpi...@apple.com Date 2016-06-28 15:09:06 -0700 (Tue, 28 Jun 2016) Log Message Move Air.js and Basic into ES6SampleBench Rubber stamped by Geoffrey Garen. We want to group our ES6 benchmarks together, and eventually,

[webkit-changes] [202585] trunk/Source/JavaScriptCore

Title: [202585] trunk/Source/_javascript_Core Revision 202585 Author fpi...@apple.com Date 2016-06-28 14:03:15 -0700 (Tue, 28 Jun 2016) Log Message JSRopeString should use release asserts, not debug asserts, about substring bounds https://bugs.webkit.org/show_bug.cgi?id=159227 Reviewed

[webkit-changes] [202502] trunk/Source/JavaScriptCore

Title: [202502] trunk/Source/_javascript_Core Revision 202502 Author fpi...@apple.com Date 2016-06-27 11:35:09 -0700 (Mon, 27 Jun 2016) Log Message B3 should not use Nops when deleting unreachable code https://bugs.webkit.org/show_bug.cgi?id=159120 rdar://problem/26500743 Reviewed by

[webkit-changes] [202469] trunk/Tools

Title: [202469] trunk/Tools Revision 202469 Author fpi...@apple.com Date 2016-06-25 12:07:15 -0700 (Sat, 25 Jun 2016) Log Message REGRESSION: Weak symbol warning when linking TestWebKitAPI https://bugs.webkit.org/show_bug.cgi?id=159104 Reviewed by Dan Bernstein. This uses a

[webkit-changes] [202463] trunk/Source/JavaScriptCore

Title: [202463] trunk/Source/_javascript_Core Revision 202463 Author fpi...@apple.com Date 2016-06-24 17:03:44 -0700 (Fri, 24 Jun 2016) Log Message B3 should die sooner if a Value has the wrong number of children https://bugs.webkit.org/show_bug.cgi?id=159108 Reviewed by Mark Lam.

[webkit-changes] [202461] trunk/Tools

Title: [202461] trunk/Tools Revision 202461 Author fpi...@apple.com Date 2016-06-24 16:49:15 -0700 (Fri, 24 Jun 2016) Log Message REGRESSION: Weak symbol warning when linking TestWebKitAPI https://bugs.webkit.org/show_bug.cgi?id=159104 Reviewed by Mark Lam. The problem is that

[webkit-changes] [202446] trunk/PerformanceTests

Title: [202446] trunk/PerformanceTests Revision 202446 Author fpi...@apple.com Date 2016-06-24 13:59:16 -0700 (Fri, 24 Jun 2016) Log Message Add a ES6 generator benchmark https://bugs.webkit.org/show_bug.cgi?id=159101 Rubber stamped by Keith Miller. This adds a Basic

[webkit-changes] [202397] trunk/Source/JavaScriptCore

Title: [202397] trunk/Source/_javascript_Core Revision 202397 Author fpi...@apple.com Date 2016-06-23 13:55:41 -0700 (Thu, 23 Jun 2016) Log Message Failing baseline JIT compilation of a code block and then trying to compile it from OSR from DFG/FTL will corrupt the CodeBlock

[webkit-changes] [202244] trunk/Source/JavaScriptCore

Title: [202244] trunk/Source/_javascript_Core Revision 202244 Author fpi...@apple.com Date 2016-06-20 14:25:33 -0700 (Mon, 20 Jun 2016) Log Message LLInt64 Float64 get_by_val doesn't purify NaN https://bugs.webkit.org/show_bug.cgi?id=158956 Reviewed by Michael Saboff. *

[webkit-changes] [202141] trunk/Source/JavaScriptCore

Title: [202141] trunk/Source/_javascript_Core Revision 202141 Author fpi...@apple.com Date 2016-06-16 15:18:06 -0700 (Thu, 16 Jun 2016) Log Message Kraken/stanford-crypto-pbkdf2.js sometimes crashes with an OSR assertion in FTL https://bugs.webkit.org/show_bug.cgi?id=158850 Reviewed by

[webkit-changes] [202007] trunk/Source/JavaScriptCore

Title: [202007] trunk/Source/_javascript_Core Revision 202007 Author fpi...@apple.com Date 2016-06-13 15:17:50 -0700 (Mon, 13 Jun 2016) Log Message FTL::Output methods should be out-of-line whenever possible https://bugs.webkit.org/show_bug.cgi?id=158704 Reviewed by Benjamin Poulain.

[webkit-changes] [201996] trunk/PerformanceTests

Title: [201996] trunk/PerformanceTests Revision 201996 Author fpi...@apple.com Date 2016-06-13 11:08:36 -0700 (Mon, 13 Jun 2016) Log Message Fix round-down goof in Air.js's ShuffleCustom.forEachArg https://bugs.webkit.org/show_bug.cgi?id=158674 Reviewed by Michael Saboff. x / 3

[webkit-changes] [201975] trunk/PerformanceTests

Title: [201975] trunk/PerformanceTests Revision 201975 Author fpi...@apple.com Date 2016-06-11 12:48:48 -0700 (Sat, 11 Jun 2016) Log Message Unreviewed, skip Air.js. It got unskipped when I renamed it from JSAir. * Skipped: Modified Paths trunk/PerformanceTests/ChangeLog

[webkit-changes] [201961] trunk/PerformanceTests

Title: [201961] trunk/PerformanceTests Revision 201961 Author fpi...@apple.com Date 2016-06-10 18:52:58 -0700 (Fri, 10 Jun 2016) Log Message Make it easy to package Air.js https://bugs.webkit.org/show_bug.cgi?id=158652 Reviewed by Benjamin Poulain. If you want to give Air.js to

[webkit-changes] [201960] trunk/PerformanceTests

Title: [201960] trunk/PerformanceTests Revision 201960 Author fpi...@apple.com Date 2016-06-10 18:32:47 -0700 (Fri, 10 Jun 2016) Log Message Unreviewed, make the link to test.html into an actual link. * Air.js/README.md: Modified Paths trunk/PerformanceTests/Air.js/README.md

[webkit-changes] [201959] trunk/PerformanceTests

Title: [201959] trunk/PerformanceTests Revision 201959 Author fpi...@apple.com Date 2016-06-10 18:20:21 -0700 (Fri, 10 Jun 2016) Log Message Fix some text in Air.js/README.md https://bugs.webkit.org/show_bug.cgi?id=158650 Reviewed by Benjamin Poulain. I read the text again and

[webkit-changes] [201957] trunk/PerformanceTests

Title: [201957] trunk/PerformanceTests Revision 201957 Author fpi...@apple.com Date 2016-06-10 17:48:43 -0700 (Fri, 10 Jun 2016) Log Message Air.js should have some documentation https://bugs.webkit.org/show_bug.cgi?id=158648 Reviewed by Keith Miller. I want to be able to point

[webkit-changes] [201947] trunk

Title: [201947] trunk Revision 201947 Author fpi...@apple.com Date 2016-06-10 15:55:01 -0700 (Fri, 10 Jun 2016) Log Message JSC Stress Test failing: jsair-tests.yaml/test.js.ftl-eager-no-cjit https://bugs.webkit.org/show_bug.cgi?id=158571 Reviewed by Keith Miller.

[webkit-changes] [201936] trunk/Source/JavaScriptCore

Title: [201936] trunk/Source/_javascript_Core Revision 201936 Author fpi...@apple.com Date 2016-06-10 12:56:18 -0700 (Fri, 10 Jun 2016) Log Message The backend should be happy to compile Unreachable even if AI didn't prove it to be unreachable

[webkit-changes] [201900] trunk/Source/JavaScriptCore

Title: [201900] trunk/Source/_javascript_Core Revision 201900 Author fpi...@apple.com Date 2016-06-09 19:03:33 -0700 (Thu, 09 Jun 2016) Log Message Rare failure in stress/v8-deltablue-strict.js.ftl-eager https://bugs.webkit.org/show_bug.cgi?id=158591 Reviewed by Saam Barati.

[webkit-changes] [201878] trunk

Title: [201878] trunk Revision 201878 Author fpi...@apple.com Date 2016-06-09 12:24:22 -0700 (Thu, 09 Jun 2016) Log Message PerformanceTests: Unreviewed, teach the perf bots not to run JSAir. * Skipped: Tools: Unreviewed, skip jsair tests while we figure out the debug timeouts. *

[webkit-changes] [201813] trunk/PerformanceTests

Title: [201813] trunk/PerformanceTests Revision 201813 Author fpi...@apple.com Date 2016-06-08 11:13:20 -0700 (Wed, 08 Jun 2016) Log Message Use more ES6 features in JSAir https://bugs.webkit.org/show_bug.cgi?id=158497 Reviewed by Keith Miller. This improves JSAir with the

[webkit-changes] [201613] trunk/Websites/webkit.org

Title: [201613] trunk/Websites/webkit.org Revision 201613 Author fpi...@apple.com Date 2016-06-02 13:05:08 -0700 (Thu, 02 Jun 2016) Log Message Fix typos and make some revisions to the B3 docs https://bugs.webkit.org/show_bug.cgi?id=158311 Reviewed by Michael Saboff. I found

[webkit-changes] [201611] trunk/Source

Title: [201611] trunk/Source Revision 201611 Author fpi...@apple.com Date 2016-06-02 12:40:20 -0700 (Thu, 02 Jun 2016) Log Message Use "= delete" for Locker(int) Rubber stamped by Saam Barati. Source/_javascript_Core: * runtime/ConcurrentJITLock.h:

[webkit-changes] [201609] trunk/Source

Title: [201609] trunk/Source Revision 201609 Author fpi...@apple.com Date 2016-06-02 12:21:53 -0700 (Thu, 02 Jun 2016) Log Message Make it harder to accidentally pass an integer to a locker. Rubber stamped by Keith Miller. Source/_javascript_Core: * runtime/ConcurrentJITLock.h:

[webkit-changes] [201605] trunk/Source

Title: [201605] trunk/Source Revision 201605 Author fpi...@apple.com Date 2016-06-02 11:41:16 -0700 (Thu, 02 Jun 2016) Log Message Make it easier to use NoLockingNecessary https://bugs.webkit.org/show_bug.cgi?id=158306 Reviewed by Keith Miller. Source/_javascript_Core: Adapt

[webkit-changes] [201590] trunk/Source/JavaScriptCore

Title: [201590] trunk/Source/_javascript_Core Revision 201590 Author fpi...@apple.com Date 2016-06-01 21:26:32 -0700 (Wed, 01 Jun 2016) Log Message Structure::previousID() races with Structure::allocateRareData() https://bugs.webkit.org/show_bug.cgi?id=158280 Reviewed by Mark Lam.

[webkit-changes] [201525] trunk/Websites/webkit.org

Title: [201525] trunk/Websites/webkit.org Revision 201525 Author fpi...@apple.com Date 2016-05-31 14:40:18 -0700 (Tue, 31 May 2016) Log Message Air needs documentation https://bugs.webkit.org/show_bug.cgi?id=153668 Reviewed by Mark Lam, Saam Barati, and Benjamin Poulain. Write

[webkit-changes] [201527] trunk/Websites/webkit.org

Title: [201527] trunk/Websites/webkit.org Revision 201527 Author fpi...@apple.com Date 2016-05-31 14:47:05 -0700 (Tue, 31 May 2016) Log Message Unreviewed, fix an obvious typo: a missing comma. * docs/b3/assembly-intermediate-representation.html: Modified Paths

[webkit-changes] [201470] trunk/Source/JavaScriptCore

Title: [201470] trunk/Source/_javascript_Core Revision 201470 Author fpi...@apple.com Date 2016-05-27 15:29:02 -0700 (Fri, 27 May 2016) Log Message DFG::LazyJSValue::tryGetStringImpl() crashes for empty values https://bugs.webkit.org/show_bug.cgi?id=158170 Reviewed by Michael Saboff.

[webkit-changes] [201467] trunk/Source/JavaScriptCore

Title: [201467] trunk/Source/_javascript_Core Revision 201467 Author fpi...@apple.com Date 2016-05-27 13:45:08 -0700 (Fri, 27 May 2016) Log Message regExpProtoFuncSplitFast should OOM before it swaps https://bugs.webkit.org/show_bug.cgi?id=158157 Reviewed by Mark Lam. This is a

[webkit-changes] [201451] trunk/Source/JavaScriptCore

Title: [201451] trunk/Source/_javascript_Core Revision 201451 Author fpi...@apple.com Date 2016-05-27 07:59:46 -0700 (Fri, 27 May 2016) Log Message Bogus uses of regexp matching should realize that they will OOM before they start swapping https://bugs.webkit.org/show_bug.cgi?id=158142

<    1   2   3   4   5   6   7   8   9   10   >