[webkit-changes] [241182] trunk/Source/bmalloc

Title: [241182] trunk/Source/bmalloc Revision 241182 Author msab...@apple.com Date 2019-02-07 18:30:22 -0800 (Thu, 07 Feb 2019) Log Message bmalloc uses more memory on iOS compared to macOS due to physical page size differences https://bugs.webkit.org/show_bug.cgi?id=192389 Reviewed by

[webkit-changes] [239969] trunk/Source/JavaScriptCore

Title: [239969] trunk/Source/_javascript_Core Revision 239969 Author msab...@apple.com Date 2019-01-14 19:01:31 -0800 (Mon, 14 Jan 2019) Log Message Add option to JSC to dump memory footprint on script completion https://bugs.webkit.org/show_bug.cgi?id=193422 Reviewed by Mark Lam.

[webkit-changes] [239595] trunk/Source/JavaScriptCore

Title: [239595] trunk/Source/_javascript_Core Revision 239595 Author msab...@apple.com Date 2019-01-03 09:58:32 -0800 (Thu, 03 Jan 2019) Log Message DFG IntegerRangeOptimization phase exceeding loop limit shouldn't ASSERT https://bugs.webkit.org/show_bug.cgi?id=193094 Reviewed by Saam

[webkit-changes] [238508] trunk/JSTests

Title: [238508] trunk/JSTests Revision 238508 Author msab...@apple.com Date 2018-11-26 11:59:41 -0800 (Mon, 26 Nov 2018) Log Message 32-bit JSC test failure: stress/regexp-compile-oom.js https://bugs.webkit.org/show_bug.cgi?id=191375 Reviewed by Mark Lam. Disabled the test for 32 bit

[webkit-changes] [238012] trunk/Source/JavaScriptCore

Title: [238012] trunk/Source/_javascript_Core Revision 238012 Author msab...@apple.com Date 2018-11-08 17:34:20 -0800 (Thu, 08 Nov 2018) Log Message Options::useRegExpJIT() should use jitEnabledByDefault() just like useJIT() https://bugs.webkit.org/show_bug.cgi?id=191444 Reviewed by

[webkit-changes] [237877] trunk

Title: [237877] trunk Revision 237877 Author msab...@apple.com Date 2018-11-06 11:19:06 -0800 (Tue, 06 Nov 2018) Log Message Multiple stress/regexp-compile-oom.js tests are failing on High Sierra Debug and Release JSC testers. https://bugs.webkit.org/show_bug.cgi?id=191271 Reviewed by

[webkit-changes] [237809] trunk/JSTests

Title: [237809] trunk/JSTests Revision 237809 Author msab...@apple.com Date 2018-11-05 09:43:40 -0800 (Mon, 05 Nov 2018) Log Message Unreviewed build fix for linux. * stress/regexp-compile-oom.js: Disabled for non-darwin OSes. Modified Paths trunk/JSTests/ChangeLog

[webkit-changes] [237763] trunk

Title: [237763] trunk Revision 237763 Author msab...@apple.com Date 2018-11-02 18:27:42 -0700 (Fri, 02 Nov 2018) Log Message Rolling in r237753 with unreviewed build fix. Fixed issues with DECLARE_THROW_SCOPE placement. Modified Paths trunk/JSTests/ChangeLog

[webkit-changes] [237753] trunk

Title: [237753] trunk Revision 237753 Author msab...@apple.com Date 2018-11-02 15:05:51 -0700 (Fri, 02 Nov 2018) Log Message Running out of stack space not properly handled in RegExp::compile() and its callers https://bugs.webkit.org/show_bug.cgi?id=191206 Reviewed by Filip Pizlo.

[webkit-changes] [237400] trunk/Source/JavaScriptCore

Title: [237400] trunk/Source/_javascript_Core Revision 237400 Author msab...@apple.com Date 2018-10-24 14:35:35 -0700 (Wed, 24 Oct 2018) Log Message 2018-10-24 Michael Saboff Increase executable memory pool from 64MB to 128MB for ARM64 https://bugs.webkit.org/show_bug.cgi?id=190453

[webkit-changes] [237024] trunk/Source/JavaScriptCore

Title: [237024] trunk/Source/_javascript_Core Revision 237024 Author msab...@apple.com Date 2018-10-10 18:39:27 -0700 (Wed, 10 Oct 2018) Log Message Increase executable memory pool from 64MB to 128MB for ARM64 https://bugs.webkit.org/show_bug.cgi?id=190453 Reviewed by Saam Barati. *

[webkit-changes] [236814] trunk/Source/JavaScriptCore

Title: [236814] trunk/Source/_javascript_Core Revision 236814 Author msab...@apple.com Date 2018-10-03 16:24:10 -0700 (Wed, 03 Oct 2018) Log Message Command line jsc should report memory footprint in bytes https://bugs.webkit.org/show_bug.cgi?id=190267 Reviewed by Mark Lam. Change to

[webkit-changes] [236362] trunk/Source/JavaScriptCore

Title: [236362] trunk/Source/_javascript_Core Revision 236362 Author msab...@apple.com Date 2018-09-21 14:47:25 -0700 (Fri, 21 Sep 2018) Log Message Add functions to measure memory footprint to JSC https://bugs.webkit.org/show_bug.cgi?id=189768 Reviewed by Saam Barati. Rolling this

[webkit-changes] [236293] trunk/Source/JavaScriptCore

Title: [236293] trunk/Source/_javascript_Core Revision 236293 Author msab...@apple.com Date 2018-09-20 16:46:43 -0700 (Thu, 20 Sep 2018) Log Message Add functions to measure memory footprint to JSC https://bugs.webkit.org/show_bug.cgi?id=189768 Reviewed by Saam Barati. Rolling this

[webkit-changes] [236235] trunk/Source/JavaScriptCore

Title: [236235] trunk/Source/_javascript_Core Revision 236235 Author msab...@apple.com Date 2018-09-19 17:42:29 -0700 (Wed, 19 Sep 2018) Log Message Add functions to measure memory footprint to JSC https://bugs.webkit.org/show_bug.cgi?id=189768 Reviewed by Saam Barati. Provide system

[webkit-changes] [235882] trunk

Title: [235882] trunk Revision 235882 Author msab...@apple.com Date 2018-09-10 21:53:56 -0700 (Mon, 10 Sep 2018) Log Message Test262 failure with Named Capture Groups - using a reference before the group is defined https://bugs.webkit.org/show_bug.cgi?id=189407 Reviewed by Alex

[webkit-changes] [235765] trunk

Title: [235765] trunk Revision 235765 Author msab...@apple.com Date 2018-09-06 16:44:49 -0700 (Thu, 06 Sep 2018) Log Message Improper speculation type for Math.pow(NaN, 0) in Abstract Interpreter https://bugs.webkit.org/show_bug.cgi?id=189380 Reviewed by Saam Barati. JSTests: New

[webkit-changes] [235655] trunk/LayoutTests

Title: [235655] trunk/LayoutTests Revision 235655 Author msab...@apple.com Date 2018-09-04 19:08:34 -0700 (Tue, 04 Sep 2018) Log Message YARR: Add new RegExp back reference tests to specifically test back reference JIT code https://bugs.webkit.org/show_bug.cgi?id=189291 Reviewed by Saam

[webkit-changes] [235648] trunk/Source/JavaScriptCore

Title: [235648] trunk/Source/_javascript_Core Revision 235648 Author msab...@apple.com Date 2018-09-04 16:51:12 -0700 (Tue, 04 Sep 2018) Log Message Unreviewed indentations change. * yarr/YarrJIT.cpp: (JSC::Yarr::YarrGenerator::matchBackreference): Modified Paths

[webkit-changes] [235645] trunk/Source/JavaScriptCore/ChangeLog

Title: [235645] trunk/Source/_javascript_Core/ChangeLog Revision 235645 Author msab...@apple.com Date 2018-09-04 16:13:55 -0700 (Tue, 04 Sep 2018) Log Message JSC Build error when changing CPU type: offlineasm: No magic values found. Skipping assembly file generation

[webkit-changes] [235636] trunk/Source

Title: [235636] trunk/Source Revision 235636 Author msab...@apple.com Date 2018-09-04 14:18:58 -0700 (Tue, 04 Sep 2018) Log Message YARR: JIT RegExps with back references https://bugs.webkit.org/show_bug.cgi?id=180874 Reviewed by Filip Pizlo. Source/_javascript_Core: Implemented

[webkit-changes] [235333] trunk/Source/JavaScriptCore

Title: [235333] trunk/Source/_javascript_Core Revision 235333 Author msab...@apple.com Date 2018-08-24 14:15:00 -0700 (Fri, 24 Aug 2018) Log Message YARR: Update UCS canonicalization tables for Unicode 11 https://bugs.webkit.org/show_bug.cgi?id=188928 Reviewed by Mark Lam. Generated

[webkit-changes] [235322] trunk/Source/JavaScriptCore

Title: [235322] trunk/Source/_javascript_Core Revision 235322 Author msab...@apple.com Date 2018-08-24 11:22:29 -0700 (Fri, 24 Aug 2018) Log Message YARR: JIT RegExps with non-greedy parenthesized sub patterns https://bugs.webkit.org/show_bug.cgi?id=180876 Reviewed by Filip Pizlo.

[webkit-changes] [235238] trunk/Source/JavaScriptCore

Title: [235238] trunk/Source/_javascript_Core Revision 235238 Author msab...@apple.com Date 2018-08-23 12:57:44 -0700 (Thu, 23 Aug 2018) Log Message YARR: Need to JIT compile a RegExp before using containsNestedSubpatterns flag https://bugs.webkit.org/show_bug.cgi?id=188895 Reviewed by

[webkit-changes] [235198] trunk/Source/JavaScriptCore

Title: [235198] trunk/Source/_javascript_Core Revision 235198 Author msab...@apple.com Date 2018-08-22 13:42:17 -0700 (Wed, 22 Aug 2018) Log Message https://bugs.webkit.org/show_bug.cgi?id=188859 Eliminate dead code operationThrowDivideError() and operationThrowOutOfBoundsAccessError()

[webkit-changes] [234713] trunk/Source/JavaScriptCore

Title: [234713] trunk/Source/_javascript_Core Revision 234713 Author msab...@apple.com Date 2018-08-08 15:42:30 -0700 (Wed, 08 Aug 2018) Log Message Yarr JIT should include annotations with dumpDisassembly=true https://bugs.webkit.org/show_bug.cgi?id=188415 Reviewed by Yusuke Suzuki.

[webkit-changes] [234075] trunk

Title: [234075] trunk Revision 234075 Author msab...@apple.com Date 2018-07-20 16:48:16 -0700 (Fri, 20 Jul 2018) Log Message DFG AbstractInterpreter: CheckArray filters array modes for DirectArguments/ScopedArguments using only NonArray https://bugs.webkit.org/show_bug.cgi?id=187827

[webkit-changes] [233773] trunk/Source/bmalloc

Title: [233773] trunk/Source/bmalloc Revision 233773 Author msab...@apple.com Date 2018-07-12 11:27:26 -0700 (Thu, 12 Jul 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. Relanding change sets 233547 and

[webkit-changes] [233716] trunk

Title: [233716] trunk Revision 233716 Author msab...@apple.com Date 2018-07-10 17:35:02 -0700 (Tue, 10 Jul 2018) Log Message DFG JIT: compileMathIC produces incorrect machine code https://bugs.webkit.org/show_bug.cgi?id=187537 Reviewed by Saam Barati. JSTests: Added new test case. *

[webkit-changes] [233690] trunk

Title: [233690] trunk Revision 233690 Author msab...@apple.com Date 2018-07-10 10:34:34 -0700 (Tue, 10 Jul 2018) Log Message YARR: . doesn't match non-BMP Unicode characters in some cases https://bugs.webkit.org/show_bug.cgi?id=187248 Reviewed by Geoffrey Garen. JSTests: New

[webkit-changes] [233674] trunk/JSTests

Title: [233674] trunk/JSTests Revision 233674 Author msab...@apple.com Date 2018-07-09 18:18:39 -0700 (Mon, 09 Jul 2018) Log Message REGRESSION (ICU-62100.0.1): JSC test mozilla-tests.yaml/ecma/String/15.5.4.12-3.js is failing https://bugs.webkit.org/show_bug.cgi?id=187495 Reviewed by

[webkit-changes] [233547] trunk/Source/bmalloc

Title: [233547] trunk/Source/bmalloc Revision 233547 Author msab...@apple.com Date 2018-07-05 16:12:04 -0700 (Thu, 05 Jul 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. Updated determineMallocFallbackState

[webkit-changes] [233347] trunk/Source/bmalloc

Title: [233347] trunk/Source/bmalloc Revision 233347 Author msab...@apple.com Date 2018-06-28 18:40:26 -0700 (Thu, 28 Jun 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. If Gigacage is disabled, it may be

[webkit-changes] [233346] trunk/Source/JavaScriptCore

Title: [233346] trunk/Source/_javascript_Core Revision 233346 Author msab...@apple.com Date 2018-06-28 18:37:38 -0700 (Thu, 28 Jun 2018) Log Message IsoCellSet::sweepToFreeList() not safe when Full GC in process https://bugs.webkit.org/show_bug.cgi?id=187157 Reviewed by Mark Lam. *

[webkit-changes] [232998] trunk/Source/JavaScriptCore

Title: [232998] trunk/Source/_javascript_Core Revision 232998 Author msab...@apple.com Date 2018-06-19 17:45:06 -0700 (Tue, 19 Jun 2018) Log Message Crash in sanitizeStackForVMImpl sometimes when switching threads with same VM https://bugs.webkit.org/show_bug.cgi?id=186827 Reviewed by

[webkit-changes] [232856] trunk/Source/JavaScriptCore

Title: [232856] trunk/Source/_javascript_Core Revision 232856 Author msab...@apple.com Date 2018-06-14 14:48:02 -0700 (Thu, 14 Jun 2018) Log Message REGRESSION(232741): Crash running ARES-6 https://bugs.webkit.org/show_bug.cgi?id=186630 Reviewed by Saam Barati. The de-duplicating work

[webkit-changes] [232719] trunk

Title: [232719] trunk Revision 232719 Author msab...@apple.com Date 2018-06-11 09:39:49 -0700 (Mon, 11 Jun 2018) Log Message _javascript_Core: Disable 32-bit JIT on Windows https://bugs.webkit.org/show_bug.cgi?id=185989 Reviewed by Mark Lam. .: * Source/cmake/OptionsWin.cmake:

[webkit-changes] [232718] trunk/Source/JavaScriptCore

Title: [232718] trunk/Source/_javascript_Core Revision 232718 Author msab...@apple.com Date 2018-06-11 09:32:21 -0700 (Mon, 11 Jun 2018) Log Message Test js/regexp-zero-length-alternatives.html fails when RegExpJIT is disabled https://bugs.webkit.org/show_bug.cgi?id=186477 Reviewed by

[webkit-changes] [232293] trunk/Source/JavaScriptCore

Title: [232293] trunk/Source/_javascript_Core Revision 232293 Author msab...@apple.com Date 2018-05-30 09:09:01 -0700 (Wed, 30 May 2018) Log Message REGRESSION(r232212): Broke Win32 Builds https://bugs.webkit.org/show_bug.cgi?id=186061 Reviewed by Yusuke Suzuki. Changed Windows builds

[webkit-changes] [232212] trunk/Source/WTF

Title: [232212] trunk/Source/WTF Revision 232212 Author msab...@apple.com Date 2018-05-25 16:26:42 -0700 (Fri, 25 May 2018) Log Message _javascript_Core: Disable 32-bit JIT on Windows https://bugs.webkit.org/show_bug.cgi?id=185989 Reviewed by Saam Barati. * wtf/Platform.h: Modified

[webkit-changes] [232122] trunk

Title: [232122] trunk Revision 232122 Author msab...@apple.com Date 2018-05-23 13:02:37 -0700 (Wed, 23 May 2018) Log Message Date.parse() doesn't properly handle input outside of ES Spec limits https://bugs.webkit.org/show_bug.cgi?id=185868 Reviewed by Mark Lam. JSTests: New test. *

[webkit-changes] [231939] trunk

Title: [231939] trunk Revision 231939 Author msab...@apple.com Date 2018-05-17 19:59:31 -0700 (Thu, 17 May 2018) Log Message We don't throw SyntaxErrors for runtime generated regular expressions with errors https://bugs.webkit.org/show_bug.cgi?id=185755 Reviewed by Keith Miller.

[webkit-changes] [231710] trunk

Title: [231710] trunk Revision 231710 Author msab...@apple.com Date 2018-05-11 11:39:06 -0700 (Fri, 11 May 2018) Log Message [DFG] Compiler uses incorrect output register for NumberIsInteger operation https://bugs.webkit.org/show_bug.cgi?id=185328 Reviewed by Keith Miller. JSTests:

[webkit-changes] [231534] trunk/Source/JavaScriptCore

Title: [231534] trunk/Source/_javascript_Core Revision 231534 Author msab...@apple.com Date 2018-05-08 18:11:40 -0700 (Tue, 08 May 2018) Log Message Replace multiple Watchpoint Set fireAll() methods with templates https://bugs.webkit.org/show_bug.cgi?id=185456 Reviewed by Saam Barati.

[webkit-changes] [231518] trunk/Source/JavaScriptCore

Title: [231518] trunk/Source/_javascript_Core Revision 231518 Author msab...@apple.com Date 2018-05-08 16:20:33 -0700 (Tue, 08 May 2018) Log Message Deferred firing of structure transition watchpoints is racy https://bugs.webkit.org/show_bug.cgi?id=185438 Reviewed by Saam Barati.

[webkit-changes] [231343] trunk

Title: [231343] trunk Revision 231343 Author msab...@apple.com Date 2018-05-03 18:11:47 -0700 (Thu, 03 May 2018) Log Message OSR entry pruning of Program Bytecodes doesn't take into account try/catch https://bugs.webkit.org/show_bug.cgi?id=185281 Reviewed by Saam Barati. JSTests: New

[webkit-changes] [231317] trunk/Source/JavaScriptCore

Title: [231317] trunk/Source/_javascript_Core Revision 231317 Author msab...@apple.com Date 2018-05-03 11:39:13 -0700 (Thu, 03 May 2018) Log Message WebContent crash loading page on seas.upenn.edu @ _javascript_Core: vmEntryToJavaScript https://bugs.webkit.org/show_bug.cgi?id=185231

[webkit-changes] [231190] trunk/Source/WebKit

Title: [231190] trunk/Source/WebKit Revision 231190 Author msab...@apple.com Date 2018-04-30 18:19:16 -0700 (Mon, 30 Apr 2018) Log Message Eliminate WebProcessShim.dylib https://bugs.webkit.org/show_bug.cgi?id=185147 Reviewed by Ryosuke Niwa. *

[webkit-changes] [231189] trunk/Source/WebKit

Title: [231189] trunk/Source/WebKit Revision 231189 Author msab...@apple.com Date 2018-04-30 17:42:31 -0700 (Mon, 30 Apr 2018) Log Message Remove unused mac/CookieStorageShimLibrary https://bugs.webkit.org/show_bug.cgi?id=185146 Reviewed by Alex Christensen. *

[webkit-changes] [229850] trunk

Title: [229850] trunk Revision 229850 Author msab...@apple.com Date 2018-03-22 08:12:44 -0700 (Thu, 22 Mar 2018) Log Message Race Condition in arrayProtoFuncReverse() causes wrong results or crash https://bugs.webkit.org/show_bug.cgi?id=183901 Reviewed by Keith Miller. JSTests: New

[webkit-changes] [229476] trunk/Source/JavaScriptCore

Title: [229476] trunk/Source/_javascript_Core Revision 229476 Author msab...@apple.com Date 2018-03-09 12:27:40 -0800 (Fri, 09 Mar 2018) Log Message Relanding "testmasm crashes in testBranchTruncateDoubleToInt32() on ARM64" https://bugs.webkit.org/show_bug.cgi?id=183488 It applied and

[webkit-changes] [229446] trunk/Source/JavaScriptCore

Title: [229446] trunk/Source/_javascript_Core Revision 229446 Author msab...@apple.com Date 2018-03-08 17:46:23 -0800 (Thu, 08 Mar 2018) Log Message testmasm crashes in testBranchTruncateDoubleToInt32() on ARM64 https://bugs.webkit.org/show_bug.cgi?id=183488 Reviewed by Mark Lam. Using

[webkit-changes] [229445] trunk/Source/JavaScriptCore/runtime/Options.h

Title: [229445] trunk/Source/_javascript_Core/runtime/Options.h Revision 229445 Author msab...@apple.com Date 2018-03-08 17:41:41 -0800 (Thu, 08 Mar 2018) Log Message Unreviewed fix. Meant to land the prior patch with Options::zeroStackFrame set to false. Modified Paths

[webkit-changes] [229444] trunk/Source/JavaScriptCore

Title: [229444] trunk/Source/_javascript_Core Revision 229444 Author msab...@apple.com Date 2018-03-08 17:38:57 -0800 (Thu, 08 Mar 2018) Log Message Emit code to zero the stack frame on function entry Nhttps://bugs.webkit.org/show_bug.cgi?id=183391 Reviewed by Mark Lam. Added code to

[webkit-changes] [229301] trunk/Source/WTF

Title: [229301] trunk/Source/WTF Revision 229301 Author msab...@apple.com Date 2018-03-05 18:34:09 -0800 (Mon, 05 Mar 2018) Log Message Start using MAP_JIT for macOS https://bugs.webkit.org/show_bug.cgi?id=183353 Reviewed by Filip Pizlo. Unify setting this flag for both iOS and macOS.

[webkit-changes] [228491] trunk/Source/JavaScriptCore

Title: [228491] trunk/Source/_javascript_Core Revision 228491 Author msab...@apple.com Date 2018-02-14 15:31:50 -0800 (Wed, 14 Feb 2018) Log Message Crash: triggerOMGTierUpThunkGenerator() doesn't align the stack pointer before calling C++ code

[webkit-changes] [228481] trunk/Source

Title: [228481] trunk/Source Revision 228481 Author msab...@apple.com Date 2018-02-14 12:37:11 -0800 (Wed, 14 Feb 2018) Log Message REGRESSION(225695) : com.apple.WebKit.WebContent at com.apple._javascript_Core: JSC::RegExp::match + 630 :: stack overflow

[webkit-changes] [227742] trunk

Title: [227742] trunk Revision 227742 Author msab...@apple.com Date 2018-01-29 11:13:45 -0800 (Mon, 29 Jan 2018) Log Message REGRESSION (r227341): DFG_ASSERT failure at JSC::DFG::AtTailAbstractState::forNode() https://bugs.webkit.org/show_bug.cgi?id=182249 Reviewed by Keith Miller.

[webkit-changes] [227341] trunk

Title: [227341] trunk Revision 227341 Author msab...@apple.com Date 2018-01-22 10:37:55 -0800 (Mon, 22 Jan 2018) Log Message DFG abstract interpreter needs to properly model effects of some Math ops https://bugs.webkit.org/show_bug.cgi?id=181886 Reviewed by Saam Barati. JSTests: New

[webkit-changes] [227165] trunk/Source/JavaScriptCore

Title: [227165] trunk/Source/_javascript_Core Revision 227165 Author msab...@apple.com Date 2018-01-18 14:43:01 -0800 (Thu, 18 Jan 2018) Log Message 2018-01-18 Michael Saboff Unreviewed build fix for Windows * interpreter/FrameTracers.h:

[webkit-changes] [226840] trunk/Source/JavaScriptCore

Title: [226840] trunk/Source/_javascript_Core Revision 226840 Author msab...@apple.com Date 2018-01-11 19:30:40 -0800 (Thu, 11 Jan 2018) Log Message REGRESSION(226788): AppStore Crashed @ _javascript_Core: JSC::MacroAssemblerARM64::pushToSaveImmediateWithoutTouchingRegisters

[webkit-changes] [226788] trunk/Source/JavaScriptCore

Title: [226788] trunk/Source/_javascript_Core Revision 226788 Author msab...@apple.com Date 2018-01-11 11:13:28 -0800 (Thu, 11 Jan 2018) Log Message Ensure there are no unsafe uses of MacroAssemblerARM64::dataTempRegister https://bugs.webkit.org/show_bug.cgi?id=181512 Reviewed by Saam

[webkit-changes] [226778] trunk/Source

Title: [226778] trunk/Source Revision 226778 Author msab...@apple.com Date 2018-01-11 07:28:38 -0800 (Thu, 11 Jan 2018) Log Message Add a DOM gadget for Spectre testing https://bugs.webkit.org/show_bug.cgi?id=181351 Reviewed by Ryosuke Niwa. Source/_javascript_Core: *

[webkit-changes] [226600] trunk/Source

Title: [226600] trunk/Source Revision 226600 Author msab...@apple.com Date 2018-01-08 17:07:29 -0800 (Mon, 08 Jan 2018) Log Message Add a DOM gadget for Spectre testing https://bugs.webkit.org/show_bug.cgi?id=181351 Source/_javascript_Core: Reviewed by Michael Saboff. Added a new

[webkit-changes] [226474] trunk/Source/JavaScriptCore

Title: [226474] trunk/Source/_javascript_Core Revision 226474 Author msab...@apple.com Date 2018-01-05 16:37:08 -0800 (Fri, 05 Jan 2018) Log Message Add ability to disable indexed property masking for testing https://bugs.webkit.org/show_bug.cgi?id=181350 Reviewed by Keith Miller. Made

[webkit-changes] [226384] trunk/Source/JavaScriptCore

Title: [226384] trunk/Source/_javascript_Core Revision 226384 Author msab...@apple.com Date 2018-01-03 16:55:41 -0800 (Wed, 03 Jan 2018) Log Message Add "noInline" to $vm https://bugs.webkit.org/show_bug.cgi?id=181265 Reviewed by Mark Lam. This would be useful for web based tests. *

[webkit-changes] [226381] trunk/Source/JavaScriptCore

Title: [226381] trunk/Source/_javascript_Core Revision 226381 Author msab...@apple.com Date 2018-01-03 16:47:15 -0800 (Wed, 03 Jan 2018) Log Message Remove unnecessary flushing of Butterfly pointer in functionCpuClflush() https://bugs.webkit.org/show_bug.cgi?id=181263 Reviewed by Mark

[webkit-changes] [225930] trunk

Title: [225930] trunk Revision 225930 Author msab...@apple.com Date 2017-12-14 14:16:38 -0800 (Thu, 14 Dec 2017) Log Message REGRESSION (r225695): Repro crash on yahoo login page https://bugs.webkit.org/show_bug.cgi?id=180761 Reviewed by JF Bastien. JSTests: New regression test. *

[webkit-changes] [225861] trunk/Source/JavaScriptCore

Title: [225861] trunk/Source/_javascript_Core Revision 225861 Author msab...@apple.com Date 2017-12-13 11:38:51 -0800 (Wed, 13 Dec 2017) Log Message Unreviewed rollout of r225695. Caused a crash on yahoo login page. That bug tracked in https://bugs.webkit.org/show_bug.cgi?id=180761.

[webkit-changes] [225771] trunk/Source/JavaScriptCore

Title: [225771] trunk/Source/_javascript_Core Revision 225771 Author msab...@apple.com Date 2017-12-11 21:47:18 -0800 (Mon, 11 Dec 2017) Log Message REGRESSION(r225683): Chakra test failure in es6/regex-unicode.js for 32bit builds https://bugs.webkit.org/show_bug.cgi?id=180685 Reviewed

[webkit-changes] [225695] trunk/Source/JavaScriptCore

Title: [225695] trunk/Source/_javascript_Core Revision 225695 Author msab...@apple.com Date 2017-12-08 12:32:42 -0800 (Fri, 08 Dec 2017) Log Message YARR: JIT RegExps with greedy parenthesized sub patterns https://bugs.webkit.org/show_bug.cgi?id=180538 Reviewed by JF Bastien. This

[webkit-changes] [225683] trunk/Source/JavaScriptCore

Title: [225683] trunk/Source/_javascript_Core Revision 225683 Author msab...@apple.com Date 2017-12-08 10:27:18 -0800 (Fri, 08 Dec 2017) Log Message YARR: Coalesce constructed character classes https://bugs.webkit.org/show_bug.cgi?id=180537 Reviewed by JF Bastien. When adding

[webkit-changes] [225552] trunk

Title: [225552] trunk Revision 225552 Author msab...@apple.com Date 2017-12-05 15:01:07 -0800 (Tue, 05 Dec 2017) Log Message Make WebKit build for ARM64_32 https://bugs.webkit.org/show_bug.cgi?id=180447 Reviewed by Mark Lam. Source/WebCore: No new test as this isn't a change to

[webkit-changes] [225413] trunk/Source/bmalloc

Title: [225413] trunk/Source/bmalloc Revision 225413 Author msab...@apple.com Date 2017-12-01 14:12:01 -0800 (Fri, 01 Dec 2017) Log Message Gigacage should not be enabled for ARM64_32 https://bugs.webkit.org/show_bug.cgi?id=180265 Reviewed by Saam Barati. Disabled Gigacage for

[webkit-changes] [225333] trunk/Source/JavaScriptCore

Title: [225333] trunk/Source/_javascript_Core Revision 225333 Author msab...@apple.com Date 2017-11-30 11:12:01 -0800 (Thu, 30 Nov 2017) Log Message Allow JSC command line tool to accept UTF8 https://bugs.webkit.org/show_bug.cgi?id=180205 Reviewed by Keith Miller. This unifies the UTF8

[webkit-changes] [224545] trunk/Source/WTF

Title: [224545] trunk/Source/WTF Revision 224545 Author msab...@apple.com Date 2017-11-07 13:19:33 -0800 (Tue, 07 Nov 2017) Log Message Add SPI function pointers qualifiers for CPU(ARM64E) https://bugs.webkit.org/show_bug.cgi?id=179383 Reviewed by Mark Lam. For ARM64E, use the

[webkit-changes] [224426] trunk/Source/JavaScriptCore

Title: [224426] trunk/Source/_javascript_Core Revision 224426 Author msab...@apple.com Date 2017-11-03 13:45:06 -0700 (Fri, 03 Nov 2017) Log Message The Abstract Interpreter needs to change similar to clobberize() in r224366 https://bugs.webkit.org/show_bug.cgi?id=179267 Reviewed by

[webkit-changes] [224366] trunk

Title: [224366] trunk Revision 224366 Author msab...@apple.com Date 2017-11-02 17:23:00 -0700 (Thu, 02 Nov 2017) Log Message DFG needs to handle code motion of code in for..in loop bodies https://bugs.webkit.org/show_bug.cgi?id=179212 Reviewed by Keith Miller. JSTests: New regression

[webkit-changes] [224302] trunk

Title: [224302] trunk Revision 224302 Author msab...@apple.com Date 2017-11-01 15:35:56 -0700 (Wed, 01 Nov 2017) Log Message Integer overflow in code generated by LoadVarargs processing in DFG and FTL. https://bugs.webkit.org/show_bug.cgi?id=179140 Reviewed by Saam Barati. JSTests:

[webkit-changes] [224197] trunk/PerformanceTests

Title: [224197] trunk/PerformanceTests Revision 224197 Author msab...@apple.com Date 2017-10-30 13:00:18 -0700 (Mon, 30 Oct 2017) Log Message Eliminate Basic compiler test from RexBench https://bugs.webkit.org/show_bug.cgi?id=179025 Reviewed by Saam Barati. * RexBench/Basic: Removed. *

[webkit-changes] [224072] trunk

Title: [224072] trunk Revision 224072 Author msab...@apple.com Date 2017-10-26 17:31:50 -0700 (Thu, 26 Oct 2017) Log Message REGRESSION(r222601): We fail to properly backtrack into a sub pattern of a parenthesis with non-zero minimum https://bugs.webkit.org/show_bug.cgi?id=178890

[webkit-changes] [223980] trunk/Source/JavaScriptCore

Title: [223980] trunk/Source/_javascript_Core Revision 223980 Author msab...@apple.com Date 2017-10-25 14:12:38 -0700 (Wed, 25 Oct 2017) Log Message REGRESSION(r223937): Use of -fobjc-weak causes build failures with older compilers https://bugs.webkit.org/show_bug.cgi?id=178825 Reviewed

[webkit-changes] [223937] trunk/Source/JavaScriptCore

Title: [223937] trunk/Source/_javascript_Core Revision 223937 Author msab...@apple.com Date 2017-10-24 15:59:51 -0700 (Tue, 24 Oct 2017) Log Message Allow OjbC Weak References when building TestAPI https://bugs.webkit.org/show_bug.cgi?id=178748 Reviewed by Dan Bernstein. Set TestAPI

[webkit-changes] [223926] trunk/Source/WTF

Title: [223926] trunk/Source/WTF Revision 223926 Author msab...@apple.com Date 2017-10-24 14:48:10 -0700 (Tue, 24 Oct 2017) Log Message WTF: Eliminated PLATFORM checks for HAVE_MACH_EXCEPTIONS https://bugs.webkit.org/show_bug.cgi?id=178747 Reviewed by Saam Barati. Removed unnecessary

[webkit-changes] [223923] trunk/Source/JavaScriptCore

Title: [223923] trunk/Source/_javascript_Core Revision 223923 Author msab...@apple.com Date 2017-10-24 14:31:01 -0700 (Tue, 24 Oct 2017) Log Message Allow OjbC Weak References when building TestAPI https://bugs.webkit.org/show_bug.cgi?id=178748 Reviewed by Saam Barati. Set TestAPI

[webkit-changes] [223724] trunk

Title: [223724] trunk Revision 223724 Author msab...@apple.com Date 2017-10-19 16:26:06 -0700 (Thu, 19 Oct 2017) Log Message Test262: RegExp/property-escapes/generated/Emoji_Component.js fails with current RegExp Unicode Properties implementation

[webkit-changes] [223219] trunk/Source/WTF

Title: [223219] trunk/Source/WTF Revision 223219 Author msab...@apple.com Date 2017-10-11 17:33:36 -0700 (Wed, 11 Oct 2017) Log Message [JSC] Add ability to build with ARMV8 ILP32 ABI https://bugs.webkit.org/show_bug.cgi?id=178194 Reviewed by Saam Barati. For ARMV8 32 bit ABI, use

[webkit-changes] [223201] trunk/JSTests

Title: [223201] trunk/JSTests Revision 223201 Author msab...@apple.com Date 2017-10-11 12:24:40 -0700 (Wed, 11 Oct 2017) Log Message Disable test262 named capture group tests with direct unicode names and with references before definitions https://bugs.webkit.org/show_bug.cgi?id=178177

[webkit-changes] [223197] trunk/Source/JavaScriptCore

Title: [223197] trunk/Source/_javascript_Core Revision 223197 Author msab...@apple.com Date 2017-10-11 12:13:59 -0700 (Wed, 11 Oct 2017) Log Message Update _javascript_Core/ucd/CaseFolding.txt to Unicode database 10.0 https://bugs.webkit.org/show_bug.cgi?id=178106 Reviewed by Keith

[webkit-changes] [223142] trunk/Source/JavaScriptCore

Title: [223142] trunk/Source/_javascript_Core Revision 223142 Author msab...@apple.com Date 2017-10-10 14:10:17 -0700 (Tue, 10 Oct 2017) Log Message Unreviewed build fix. Removed unused lambda capture. * yarr/YarrPattern.cpp: (JSC::Yarr::CharacterClassConstructor::appendInverted):

[webkit-changes] [223010] trunk/Source/JavaScriptCore

Title: [223010] trunk/Source/_javascript_Core Revision 223010 Author msab...@apple.com Date 2017-10-06 16:21:48 -0700 (Fri, 06 Oct 2017) Log Message Enable RegExp JIT for match only Unicode RegExp's https://bugs.webkit.org/show_bug.cgi?id=178033 Reviewed by JF Bastien. I forgot to turn

[webkit-changes] [222607] trunk/Source/JavaScriptCore/ChangeLog

Title: [222607] trunk/Source/_javascript_Core/ChangeLog Revision 222607 Author msab...@apple.com Date 2017-09-28 04:20:24 -0700 (Thu, 28 Sep 2017) Log Message Unreviewed fix of description in Changelog. Modified Paths trunk/Source/_javascript_Core/ChangeLog Diff Modified:

[webkit-changes] [222601] trunk

Title: [222601] trunk Revision 222601 Author msab...@apple.com Date 2017-09-27 22:15:50 -0700 (Wed, 27 Sep 2017) Log Message REGRESSION(210837): RegExp containing failed non-zero minimum greedy groups incorrectly match https://bugs.webkit.org/show_bug.cgi?id=177570 Reviewed by Filip

[webkit-changes] [222600] trunk

Title: [222600] trunk Revision 222600 Author msab...@apple.com Date 2017-09-27 21:48:51 -0700 (Wed, 27 Sep 2017) Log Message Heap out of bounds read in JSC::Yarr::Parser::peek() https://bugs.webkit.org/show_bug.cgi?id=177423 Reviewed by Mark Lam.

[webkit-changes] [222135] trunk

Title: [222135] trunk Revision 222135 Author msab...@apple.com Date 2017-09-17 08:39:02 -0700 (Sun, 17 Sep 2017) Log Message https://bugs.webkit.org/show_bug.cgi?id=177038 Add an option to run-jsc-stress-tests to limit tests variations to a basic set Reviewed by JF Bastien. JSTests: *

[webkit-changes] [221949] trunk

Title: [221949] trunk Revision 221949 Author msab...@apple.com Date 2017-09-12 17:20:36 -0700 (Tue, 12 Sep 2017) Log Message String.prototype.replace() puts extra '<' in result when a named capture reference is used without named captures in the RegExp

[webkit-changes] [221769] trunk

Title: [221769] trunk Revision 221769 Author msab...@apple.com Date 2017-09-07 16:13:38 -0700 (Thu, 07 Sep 2017) Log Message Add support for RegExp named capture groups https://bugs.webkit.org/show_bug.cgi?id=176435 Reviewed by Filip Pizlo. Source/_javascript_Core: Added parsing for

[webkit-changes] [221167] trunk/Source/JavaScriptCore

Title: [221167] trunk/Source/_javascript_Core Revision 221167 Author msab...@apple.com Date 2017-08-24 16:03:27 -0700 (Thu, 24 Aug 2017) Log Message Enable moving fixed character class terms after fixed character terms for BMP only character classes

[webkit-changes] [221160] trunk

Title: [221160] trunk Revision 221160 Author msab...@apple.com Date 2017-08-24 14:14:43 -0700 (Thu, 24 Aug 2017) Log Message Add support for RegExp "dotAll" flag https://bugs.webkit.org/show_bug.cgi?id=175924 Reviewed by Keith Miller. JSTests: Updated tests for new dotAll ('s' flag)

[webkit-changes] [221111] trunk

Title: [22] trunk Revision 22 Author msab...@apple.com Date 2017-08-23 15:24:30 -0700 (Wed, 23 Aug 2017) Log Message REGRESSION (r221052): DumpRenderTree crashed in com.apple._javascript_Core: JSC::Yarr::YarrCodeBlock::execute + 137 https://bugs.webkit.org/show_bug.cgi?id=175903

<    1   2   3   4   5   6   7   8   9   10   >