[webkit-changes] [295748] trunk

Title: [295748] trunk Revision 295748 Author sbar...@apple.com Date 2022-06-22 14:01:40 -0700 (Wed, 22 Jun 2022) Log Message Don't install webpushd on catalyst https://bugs.webkit.org/show_bug.cgi?id=241860 Reviewed by Alexey Proskuryakov. *

[webkit-changes] [295606] trunk/Source/JavaScriptCore/b3/air/ AirAllocateRegistersAndStackAndGenerateCode.cpp

Title: [295606] trunk/Source/_javascript_Core/b3/air/AirAllocateRegistersAndStackAndGenerateCode.cpp Revision 295606 Author sbar...@apple.com Date 2022-06-16 12:51:36 -0700 (Thu, 16 Jun 2022) Log Message Change how we rewind instructions in Air's O0 register allocator

[webkit-changes] [295585] trunk/Source/JavaScriptCore

Title: [295585] trunk/Source/_javascript_Core Revision 295585 Author sbar...@apple.com Date 2022-06-15 22:31:25 -0700 (Wed, 15 Jun 2022) Log Message Don't clear both prototype ICs for LLInt iterator_next https://bugs.webkit.org/show_bug.cgi?id=241663 Reviewed by Yusuke Suzuki. If we

[webkit-changes] [294917] trunk/Source/JavaScriptCore

Title: [294917] trunk/Source/_javascript_Core Revision 294917 Author sbar...@apple.com Date 2022-05-26 17:56:40 -0700 (Thu, 26 May 2022) Log Message Rename putDirect to putDirectOffset https://bugs.webkit.org/show_bug.cgi?id=240992 Reviewed by Mark Lam. *

[webkit-changes] [294284] trunk/Source/JavaScriptCore

Title: [294284] trunk/Source/_javascript_Core Revision 294284 Author sbar...@apple.com Date 2022-05-16 18:34:39 -0700 (Mon, 16 May 2022) Log Message Move around some NaN handling code https://bugs.webkit.org/show_bug.cgi?id=240493 Reviewed by Yusuke Suzuki. *

[webkit-changes] [294087] trunk/Source/JavaScriptCore

Title: [294087] trunk/Source/_javascript_Core Revision 294087 Author sbar...@apple.com Date 2022-05-11 19:06:37 -0700 (Wed, 11 May 2022) Log Message Better handle clobbered registers in O0 register allocation https://bugs.webkit.org/show_bug.cgi?id=240205 Reviewed by Yusuke Suzuki.

[webkit-changes] [292926] trunk

Title: [292926] trunk Revision 292926 Author sbar...@apple.com Date 2022-04-15 15:56:46 -0700 (Fri, 15 Apr 2022) Log Message Unreviewed. Add my github into to contributors.json. * metadata/contributors.json: Modified Paths trunk/ChangeLog trunk/metadata/contributors.json Diff

[webkit-changes] [292493] trunk/Source/JavaScriptCore

Title: [292493] trunk/Source/_javascript_Core Revision 292493 Author sbar...@apple.com Date 2022-04-06 12:35:37 -0700 (Wed, 06 Apr 2022) Log Message Call Structure::get instead of Structure::getConcurrently on the mutator thread https://bugs.webkit.org/show_bug.cgi?id=238823 Reviewed by

[webkit-changes] [292369] trunk

Title: [292369] trunk Revision 292369 Author sbar...@apple.com Date 2022-04-04 20:32:00 -0700 (Mon, 04 Apr 2022) Log Message Turn off LLInt ICs in captive portal mode https://bugs.webkit.org/show_bug.cgi?id=238778 Reviewed by Yusuke Suzuki. Source/_javascript_Core: *

[webkit-changes] [291602] trunk/Source/JavaScriptCore

Title: [291602] trunk/Source/_javascript_Core Revision 291602 Author sbar...@apple.com Date 2022-03-21 20:54:43 -0700 (Mon, 21 Mar 2022) Log Message Fix bug in Relationship::mergeImpl https://bugs.webkit.org/show_bug.cgi?id=238183 Reviewed by Yusuke Suzuki. *

[webkit-changes] [291601] trunk/Source/JavaScriptCore

Title: [291601] trunk/Source/_javascript_Core Revision 291601 Author sbar...@apple.com Date 2022-03-21 20:52:50 -0700 (Mon, 21 Mar 2022) Log Message AirFixObviousSpills needs to consider a PreIndex and PostIndex as clobbering the Reg used for indexing

[webkit-changes] [291436] trunk/Tools

Title: [291436] trunk/Tools Revision 291436 Author sbar...@apple.com Date 2022-03-17 13:22:19 -0700 (Thu, 17 Mar 2022) Log Message compare-results should break down sync vs async time in Speedometer2 https://bugs.webkit.org/show_bug.cgi?id=237993 Reviewed by Alexey Shvayka. *

[webkit-changes] [291325] trunk/Tools

Title: [291325] trunk/Tools Revision 291325 Author sbar...@apple.com Date 2022-03-15 19:35:33 -0700 (Tue, 15 Mar 2022) Log Message Add support for chrome-beta and chrome-dev to run-benchmark https://bugs.webkit.org/show_bug.cgi?id=237937 Reviewed by Stephanie Lewis. *

[webkit-changes] [291087] trunk/Source/JavaScriptCore

Title: [291087] trunk/Source/_javascript_Core Revision 291087 Author sbar...@apple.com Date 2022-03-09 19:31:10 -0800 (Wed, 09 Mar 2022) Log Message Limit WK_XCODE_SUPPORTS_LTO in _javascript_Core based on target OS https://bugs.webkit.org/show_bug.cgi?id=237682 Reviewed by Alexey

[webkit-changes] [290993] trunk/Source/JavaScriptCore

Title: [290993] trunk/Source/_javascript_Core Revision 290993 Author sbar...@apple.com Date 2022-03-08 08:42:32 -0800 (Tue, 08 Mar 2022) Log Message [JSC] Enable ThinLTO https://bugs.webkit.org/show_bug.cgi?id=229019 Reviewed by Mark Lam. It's a 1% speedup on Speedometer2 across x86

[webkit-changes] [290788] trunk/Source/JavaScriptCore

Title: [290788] trunk/Source/_javascript_Core Revision 290788 Author sbar...@apple.com Date 2022-03-03 11:51:30 -0800 (Thu, 03 Mar 2022) Log Message Add a DeferTraps scope https://bugs.webkit.org/show_bug.cgi?id=237306 Reviewed by Mark Lam. * bytecode/CodeBlock.cpp:

[webkit-changes] [290717] trunk/Source/JavaScriptCore

Title: [290717] trunk/Source/_javascript_Core Revision 290717 Author sbar...@apple.com Date 2022-03-01 19:42:31 -0800 (Tue, 01 Mar 2022) Log Message Add a DeferTraps scope https://bugs.webkit.org/show_bug.cgi?id=237306 Reviewed by Mark Lam. * bytecode/CodeBlock.cpp:

[webkit-changes] [290145] trunk/Source/ThirdParty/ANGLE

Title: [290145] trunk/Source/ThirdParty/ANGLE Revision 290145 Author sbar...@apple.com Date 2022-02-18 10:59:32 -0800 (Fri, 18 Feb 2022) Log Message Remove ANGLE-static.xcconfig https://bugs.webkit.org/show_bug.cgi?id=236827 Reviewed by Dean Jackson. It was unused. *

[webkit-changes] [290117] trunk/Source

Title: [290117] trunk/Source Revision 290117 Author sbar...@apple.com Date 2022-02-18 00:16:54 -0800 (Fri, 18 Feb 2022) Log Message Add LC_SOURCE_VERSION to compile targets https://bugs.webkit.org/show_bug.cgi?id=236720 Reviewed by Michael Saboff. Source/_javascript_Core: *

[webkit-changes] [289462] trunk

Title: [289462] trunk Revision 289462 Author sbar...@apple.com Date 2022-02-09 01:15:58 -0800 (Wed, 09 Feb 2022) Log Message Don't return an empty value from AbortController.signal.reason and make it harder to return empty values from JSValueInWrappedObject

[webkit-changes] [289354] trunk/Source/JavaScriptCore

Title: [289354] trunk/Source/_javascript_Core Revision 289354 Author sbar...@apple.com Date 2022-02-07 19:00:28 -0800 (Mon, 07 Feb 2022) Log Message Wasm crash on https://copy.sh/v86/?profile="" https://bugs.webkit.org/show_bug.cgi?id=236037 rdar://88358719 Reviewed by Mark Lam. Lower

[webkit-changes] [289024] trunk/Source/JavaScriptCore

Title: [289024] trunk/Source/_javascript_Core Revision 289024 Author sbar...@apple.com Date 2022-02-02 20:16:14 -0800 (Wed, 02 Feb 2022) Log Message SecureARM64EHashPins should check g_jscConfig.useFastJITPermissions https://bugs.webkit.org/show_bug.cgi?id=236055 Reviewed by Mark Lam.

[webkit-changes] [288261] trunk/Source

Title: [288261] trunk/Source Revision 288261 Author sbar...@apple.com Date 2022-01-19 17:39:29 -0800 (Wed, 19 Jan 2022) Log Message Update ARM64EHash https://bugs.webkit.org/show_bug.cgi?id=235192 Reviewed by Mark Lam. Source/_javascript_Core: * CMakeLists.txt: *

[webkit-changes] [288028] trunk/Source/JavaScriptCore

Title: [288028] trunk/Source/_javascript_Core Revision 288028 Author sbar...@apple.com Date 2022-01-14 13:07:47 -0800 (Fri, 14 Jan 2022) Log Message Make isJITPC fast https://bugs.webkit.org/show_bug.cgi?id=235241 Reviewed by Yusuke Suzuki. Make it an inlined function, and stop tagging

[webkit-changes] [288023] trunk/Source/JavaScriptCore

Title: [288023] trunk/Source/_javascript_Core Revision 288023 Author sbar...@apple.com Date 2022-01-14 12:05:39 -0800 (Fri, 14 Jan 2022) Log Message Use IRC for Wasm, and Briggs for JS on ARM64 https://bugs.webkit.org/show_bug.cgi?id=235235 Reviewed by Yusuke Suzuki and Robin Morisset.

[webkit-changes] [288002] trunk/Source/JavaScriptCore

Title: [288002] trunk/Source/_javascript_Core Revision 288002 Author sbar...@apple.com Date 2022-01-13 18:40:08 -0800 (Thu, 13 Jan 2022) Log Message Link Wasm code on the same thread that JITs https://bugs.webkit.org/show_bug.cgi?id=235201 Reviewed by Yusuke Suzuki and Mark Lam. This

[webkit-changes] [287864] trunk/Source/JavaScriptCore

Title: [287864] trunk/Source/_javascript_Core Revision 287864 Author sbar...@apple.com Date 2022-01-10 17:36:00 -0800 (Mon, 10 Jan 2022) Log Message Allow loop tier up to the Air tier https://bugs.webkit.org/show_bug.cgi?id=234587 Reviewed by Yusuke Suzuki. This patch adds loop tier

[webkit-changes] [287806] trunk/Source/JavaScriptCore

Title: [287806] trunk/Source/_javascript_Core Revision 287806 Author sbar...@apple.com Date 2022-01-07 19:42:42 -0800 (Fri, 07 Jan 2022) Log Message Unreviewed. Appease an assertion that was broken by r287801 by slightly refactoring code so we don't clobber the same named register twice.

[webkit-changes] [287801] trunk/Source/JavaScriptCore

Title: [287801] trunk/Source/_javascript_Core Revision 287801 Author sbar...@apple.com Date 2022-01-07 17:57:04 -0800 (Fri, 07 Jan 2022) Log Message Add support for Wasm exceptions in the Air generator https://bugs.webkit.org/show_bug.cgi?id=231211 Reviewed by Filip Pizlo. This patch

[webkit-changes] [287738] trunk

Title: [287738] trunk Revision 287738 Author sbar...@apple.com Date 2022-01-06 20:54:03 -0800 (Thu, 06 Jan 2022) Log Message preparePatchpointForExceptions needs to handle tuples https://bugs.webkit.org/show_bug.cgi?id=234909 Reviewed by Yusuke Suzuki. JSTests: Add support to the

[webkit-changes] [287379] trunk

Title: [287379] trunk Revision 287379 Author sbar...@apple.com Date 2021-12-22 17:12:14 -0800 (Wed, 22 Dec 2021) Log Message LLInt should loop OSR into BBQ and BBQ should loop OSR into OMG https://bugs.webkit.org/show_bug.cgi?id=234542 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [287218] trunk/Source/JavaScriptCore

Title: [287218] trunk/Source/_javascript_Core Revision 287218 Author sbar...@apple.com Date 2021-12-17 19:35:22 -0800 (Fri, 17 Dec 2021) Log Message Use IRC by default on arm64 https://bugs.webkit.org/show_bug.cgi?id=234449 Reviewed by Yusuke Suzuki. I'm seeing a Wasm perf improvement

[webkit-changes] [287203] trunk/Source/JavaScriptCore

Title: [287203] trunk/Source/_javascript_Core Revision 287203 Author sbar...@apple.com Date 2021-12-17 13:05:42 -0800 (Fri, 17 Dec 2021) Log Message Support WasmAddress in B3 CSE https://bugs.webkit.org/show_bug.cgi?id=234051 Reviewed by Filip Pizlo and Yusuke Suzuki. This patch adds

[webkit-changes] [287160] trunk/Source/JavaScriptCore

Title: [287160] trunk/Source/_javascript_Core Revision 287160 Author sbar...@apple.com Date 2021-12-16 15:30:22 -0800 (Thu, 16 Dec 2021) Log Message Use arm64's fmax/fmin instructions in Wasm https://bugs.webkit.org/show_bug.cgi?id=234367 Reviewed by Keith Miller. This patch adds

[webkit-changes] [287012] trunk/Source/JavaScriptCore

Title: [287012] trunk/Source/_javascript_Core Revision 287012 Author sbar...@apple.com Date 2021-12-13 23:07:39 -0800 (Mon, 13 Dec 2021) Log Message WasmB3IRGenerator should estimate static execution counts https://bugs.webkit.org/show_bug.cgi?id=234284 Reviewed by Filip Pizlo. This

[webkit-changes] [286920] trunk/Source/JavaScriptCore

Title: [286920] trunk/Source/_javascript_Core Revision 286920 Author sbar...@apple.com Date 2021-12-11 16:39:57 -0800 (Sat, 11 Dec 2021) Log Message Teach the sampling profiler how to display origin data for B3 Wasm https://bugs.webkit.org/show_bug.cgi?id=234097 Reviewed by Yusuke

[webkit-changes] [286802] trunk/Source/JavaScriptCore

Title: [286802] trunk/Source/_javascript_Core Revision 286802 Author sbar...@apple.com Date 2021-12-09 13:49:45 -0800 (Thu, 09 Dec 2021) Log Message Procedure::setNeedsPCToOriginMap should call Code::forcePreservationOfB3Origins https://bugs.webkit.org/show_bug.cgi?id=234093 Reviewed by

[webkit-changes] [286790] trunk/Source/JavaScriptCore

Title: [286790] trunk/Source/_javascript_Core Revision 286790 Author sbar...@apple.com Date 2021-12-09 11:07:58 -0800 (Thu, 09 Dec 2021) Log Message Add an option to dump the B3 IR for an allowlist of Wasm function indices https://bugs.webkit.org/show_bug.cgi?id=234028 Reviewed by Tadeu

[webkit-changes] [286639] trunk

Title: [286639] trunk Revision 286639 Author sbar...@apple.com Date 2021-12-07 19:59:13 -0800 (Tue, 07 Dec 2021) Log Message TypedArray prototype set should go down the fast path when using non clamped integer types of the same byte size https://bugs.webkit.org/show_bug.cgi?id=233905

[webkit-changes] [286471] trunk/Source/JavaScriptCore

Title: [286471] trunk/Source/_javascript_Core Revision 286471 Author sbar...@apple.com Date 2021-12-02 18:06:24 -0800 (Thu, 02 Dec 2021) Log Message Lower structureHeapAddressSize on more memory limited ARM64 devices https://bugs.webkit.org/show_bug.cgi?id=233786 Reviewed by Yusuke

[webkit-changes] [286462] trunk

Title: [286462] trunk Revision 286462 Author sbar...@apple.com Date 2021-12-02 16:12:52 -0800 (Thu, 02 Dec 2021) Log Message Fix OOM crash in JSValue::toWTFStringForConsole https://bugs.webkit.org/show_bug.cgi?id=233775 Reviewed by Mark Lam. JSTests: * stress/pretty-print-oom.js:

[webkit-changes] [286312] trunk

Title: [286312] trunk Revision 286312 Author sbar...@apple.com Date 2021-11-30 12:00:44 -0800 (Tue, 30 Nov 2021) Log Message GetMyArgumentByValOutOfBounds needs to check for negative indices https://bugs.webkit.org/show_bug.cgi?id=232966 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [286278] trunk

Title: [286278] trunk Revision 286278 Author sbar...@apple.com Date 2021-11-29 17:58:37 -0800 (Mon, 29 Nov 2021) Log Message FTL's implementation of HasIndexedProperty for InBounds accesses checks the inverse of what it should be checking when exiting by seeing a hole

[webkit-changes] [286070] trunk

Title: [286070] trunk Revision 286070 Author sbar...@apple.com Date 2021-11-19 11:36:35 -0800 (Fri, 19 Nov 2021) Log Message Fix assertion added in r285592 https://bugs.webkit.org/show_bug.cgi?id=233373 JSTests: Reviewed by Keith Miller. *

[webkit-changes] [285971] trunk

Title: [285971] trunk Revision 285971 Author sbar...@apple.com Date 2021-11-17 18:47:45 -0800 (Wed, 17 Nov 2021) Log Message Run the memmove fast path in JSGenericTypedArrayView::set when using a combination of Uint8 and Uint8Clamped https://bugs.webkit.org/show_bug.cgi?id=233271

[webkit-changes] [285592] trunk

Title: [285592] trunk Revision 285592 Author sbar...@apple.com Date 2021-11-10 10:54:59 -0800 (Wed, 10 Nov 2021) Log Message in_by_val should not constant fold to in_by_id when the property is a property index https://bugs.webkit.org/show_bug.cgi?id=232753 Reviewed by Yusuke Suzuki.

[webkit-changes] [285525] trunk

Title: [285525] trunk Revision 285525 Author sbar...@apple.com Date 2021-11-09 12:49:41 -0800 (Tue, 09 Nov 2021) Log Message When inlining NewSymbol in the DFG don't universally call ToString on the input https://bugs.webkit.org/show_bug.cgi?id=232754 Reviewed by Robin Morisset.

[webkit-changes] [285406] trunk

Title: [285406] trunk Revision 285406 Author sbar...@apple.com Date 2021-11-08 09:05:33 -0800 (Mon, 08 Nov 2021) Log Message We need to PreferNumber when calling toPrimitive for negate https://bugs.webkit.org/show_bug.cgi?id=232679 Reviewed by Alexey Shvayka. JSTests: *

[webkit-changes] [285167] trunk

Title: [285167] trunk Revision 285167 Author sbar...@apple.com Date 2021-11-02 10:25:46 -0700 (Tue, 02 Nov 2021) Log Message EnumeratorGetByVal for IndexedMode+OwnStructureMode doesn't always recover the property name https://bugs.webkit.org/show_bug.cgi?id=231321 Reviewed by Yusuke

[webkit-changes] [285123] trunk

Title: [285123] trunk Revision 285123 Author sbar...@apple.com Date 2021-11-01 13:10:24 -0700 (Mon, 01 Nov 2021) Log Message ArrayBuffer species watchpoint being invalidated doesn't mean it's not an ArrayBuffer constructor from the same global object

[webkit-changes] [285036] trunk/Source/WTF

Title: [285036] trunk/Source/WTF Revision 285036 Author sbar...@apple.com Date 2021-10-29 10:17:22 -0700 (Fri, 29 Oct 2021) Log Message Disable ENABLE_JIT on arm64_32 https://bugs.webkit.org/show_bug.cgi?id=232468 Reviewed by Yusuke Suzuki. We were disabling JIT via a runtime

[webkit-changes] [285004] trunk/Source/JavaScriptCore

Title: [285004] trunk/Source/_javascript_Core Revision 285004 Author sbar...@apple.com Date 2021-10-28 14:22:35 -0700 (Thu, 28 Oct 2021) Log Message Don't call type() on Structure, instead call type() on its typeInfo() https://bugs.webkit.org/show_bug.cgi?id=232414 Reviewed by Yusuke

[webkit-changes] [284699] trunk/Source/JavaScriptCore

Title: [284699] trunk/Source/_javascript_Core Revision 284699 Author sbar...@apple.com Date 2021-10-22 11:23:09 -0700 (Fri, 22 Oct 2021) Log Message canDoFastSpread should also check that the Structure is from the global object we're watching

[webkit-changes] [284664] trunk/Source

Title: [284664] trunk/Source Revision 284664 Author sbar...@apple.com Date 2021-10-21 21:31:45 -0700 (Thu, 21 Oct 2021) Log Message Clean up some code around checking the state of Watchpoints https://bugs.webkit.org/show_bug.cgi?id=232111 Reviewed by Yusuke Suzuki.

[webkit-changes] [284506] trunk/Source/JavaScriptCore

Title: [284506] trunk/Source/_javascript_Core Revision 284506 Author sbar...@apple.com Date 2021-10-19 15:48:26 -0700 (Tue, 19 Oct 2021) Log Message canDoFastSpread should also check that the Structure is from the global object we're watching

[webkit-changes] [284396] trunk/Source/JavaScriptCore

Title: [284396] trunk/Source/_javascript_Core Revision 284396 Author sbar...@apple.com Date 2021-10-18 13:41:50 -0700 (Mon, 18 Oct 2021) Log Message Don't load metadata base pointer in EXTRA_CTI_THUNKS https://bugs.webkit.org/show_bug.cgi?id=231850 Reviewed by Yusuke Suzuki. We were

[webkit-changes] [284224] trunk/Source/JavaScriptCore

Title: [284224] trunk/Source/_javascript_Core Revision 284224 Author sbar...@apple.com Date 2021-10-14 18:49:44 -0700 (Thu, 14 Oct 2021) Log Message Make unlinked Baseline JIT scope operations bias the order of checks to the ResolveType that profiling tells us we are likely to be

[webkit-changes] [284036] trunk/Source/JavaScriptCore

Title: [284036] trunk/Source/_javascript_Core Revision 284036 Author sbar...@apple.com Date 2021-10-12 14:51:35 -0700 (Tue, 12 Oct 2021) Log Message Fix spec-correctness when inlining __proto__ intrinsic using get_by_id_with_this https://bugs.webkit.org/show_bug.cgi?id=231559 Reviewed

[webkit-changes] [283970] trunk/Source

Title: [283970] trunk/Source Revision 283970 Author sbar...@apple.com Date 2021-10-11 23:32:55 -0700 (Mon, 11 Oct 2021) Log Message Remove ImplicitAddress https://bugs.webkit.org/show_bug.cgi?id=230820 Reviewed by Yusuke Suzuki. Source/_javascript_Core: Because we rely on implicit

[webkit-changes] [283954] trunk/Source/JavaScriptCore

Title: [283954] trunk/Source/_javascript_Core Revision 283954 Author sbar...@apple.com Date 2021-10-11 17:33:18 -0700 (Mon, 11 Oct 2021) Log Message Share more code that uses ScratchRegisterAllocator in the ICs https://bugs.webkit.org/show_bug.cgi?id=231125 Reviewed by Sam Weinig. We

[webkit-changes] [283938] trunk

Title: [283938] trunk Revision 283938 Author sbar...@apple.com Date 2021-10-11 14:45:29 -0700 (Mon, 11 Oct 2021) Log Message Don't branch around register allocation in DFG enumerator get by val and pass in the right LValue type to strictInt52ToJSValue

[webkit-changes] [283862] trunk/Source/JavaScriptCore

Title: [283862] trunk/Source/_javascript_Core Revision 283862 Author sbar...@apple.com Date 2021-10-08 20:29:53 -0700 (Fri, 08 Oct 2021) Log Message Run backwards propagation before we prune the graph after ForceOSRExit nodes in BytecodeParser

[webkit-changes] [283818] trunk

Title: [283818] trunk Revision 283818 Author sbar...@apple.com Date 2021-10-08 12:01:43 -0700 (Fri, 08 Oct 2021) Log Message RegExpExec can't statically prove which of the two structures it will get in AI by just looking at the RegExp* https://bugs.webkit.org/show_bug.cgi?id=231382

[webkit-changes] [283623] trunk

Title: [283623] trunk Revision 283623 Author sbar...@apple.com Date 2021-10-06 08:49:42 -0700 (Wed, 06 Oct 2021) Log Message Run backwards propagation before we prune the graph after ForceOSRExit nodes in BytecodeParser https://bugs.webkit.org/show_bug.cgi?id=230823 Reviewed by Robin

[webkit-changes] [283600] trunk

Title: [283600] trunk Revision 283600 Author sbar...@apple.com Date 2021-10-05 22:20:07 -0700 (Tue, 05 Oct 2021) Log Message Don't pass DontBuildStrings to next token after parsing an empty parameter list https://bugs.webkit.org/show_bug.cgi?id=225094 Reviewed by Yusuke Suzuki.

[webkit-changes] [283527] trunk/Source/JavaScriptCore

Title: [283527] trunk/Source/_javascript_Core Revision 283527 Author sbar...@apple.com Date 2021-10-04 17:33:56 -0700 (Mon, 04 Oct 2021) Log Message Display return values in nicer way in the jsc REPL and add a prettyPrint function https://bugs.webkit.org/show_bug.cgi?id=230931 Reviewed

[webkit-changes] [283512] trunk

Title: [283512] trunk Revision 283512 Author sbar...@apple.com Date 2021-10-04 12:58:05 -0700 (Mon, 04 Oct 2021) Log Message IntrinsicGetterAccessCase implementation of __proto__ needs to handle get_by_id_with_this https://bugs.webkit.org/show_bug.cgi?id=229951 Reviewed by Yusuke

[webkit-changes] [283344] trunk/Source/JavaScriptCore

Title: [283344] trunk/Source/_javascript_Core Revision 283344 Author sbar...@apple.com Date 2021-09-30 16:06:22 -0700 (Thu, 30 Sep 2021) Log Message Regressions (r283288): [ macOS Debug ] webgl/2.0.0/conformance/state/gl-object-get-calls.html is timing out

[webkit-changes] [283332] trunk

Title: [283332] trunk Revision 283332 Author sbar...@apple.com Date 2021-09-30 13:37:55 -0700 (Thu, 30 Sep 2021) Log Message The DFG/FTL need to be aware that Proxy's can produce "function" for typeof and might be callable https://bugs.webkit.org/show_bug.cgi?id=230804 Reviewed by

[webkit-changes] [283293] trunk

Title: [283293] trunk Revision 283293 Author sbar...@apple.com Date 2021-09-29 18:39:22 -0700 (Wed, 29 Sep 2021) Log Message Print values in a nicer way in the jsc shell https://bugs.webkit.org/show_bug.cgi?id=230931 Reviewed by Tadeu Zagallo. JSTests: * ChakraCore/test/jsc-lib.js:

[webkit-changes] [283288] trunk

Title: [283288] trunk Revision 283288 Author sbar...@apple.com Date 2021-09-29 17:47:41 -0700 (Wed, 29 Sep 2021) Log Message We need to load the baseline JIT's constant pool register after OSR exit to checkpoints if we return to baseline code

[webkit-changes] [283232] trunk

Title: [283232] trunk Revision 283232 Author sbar...@apple.com Date 2021-09-29 10:03:29 -0700 (Wed, 29 Sep 2021) Log Message Code inside strength reduction can incorrectly prove that we know what lastIndex is https://bugs.webkit.org/show_bug.cgi?id=230802 Reviewed by Mark Lam.

[webkit-changes] [283231] trunk/JSTests

Title: [283231] trunk/JSTests Revision 283231 Author sbar...@apple.com Date 2021-09-29 09:56:07 -0700 (Wed, 29 Sep 2021) Log Message DoesGCCheck does not use enough bits for nodeIndex https://bugs.webkit.org/show_bug.cgi?id=230915 Unreviewed. Forgot to add a try/catch in the test. *

[webkit-changes] [283207] trunk

Title: [283207] trunk Revision 283207 Author sbar...@apple.com Date 2021-09-28 18:33:02 -0700 (Tue, 28 Sep 2021) Log Message DoesGCCheck does not use enough bits for nodeIndex https://bugs.webkit.org/show_bug.cgi?id=230915 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [283168] trunk/Source/JavaScriptCore

Title: [283168] trunk/Source/_javascript_Core Revision 283168 Author sbar...@apple.com Date 2021-09-28 08:32:53 -0700 (Tue, 28 Sep 2021) Log Message Make byte codes with arithmetic profiles switch to using an index instead of a pointer in metadata

[webkit-changes] [283088] trunk/Source/JavaScriptCore

Title: [283088] trunk/Source/_javascript_Core Revision 283088 Author sbar...@apple.com Date 2021-09-26 10:23:15 -0700 (Sun, 26 Sep 2021) Log Message Make byte codes with arithmetic profiles switch to using an index instead of a pointer in metadata

[webkit-changes] [282624] trunk/Source/JavaScriptCore

Title: [282624] trunk/Source/_javascript_Core Revision 282624 Author sbar...@apple.com Date 2021-09-16 18:04:59 -0700 (Thu, 16 Sep 2021) Log Message Don't throw an exception in the middle of linking a CodeBlock https://bugs.webkit.org/show_bug.cgi?id=230367 Reviewed by Yusuke Suzuki.

[webkit-changes] [282621] trunk/Source/JavaScriptCore

Title: [282621] trunk/Source/_javascript_Core Revision 282621 Author sbar...@apple.com Date 2021-09-16 17:11:24 -0700 (Thu, 16 Sep 2021) Log Message Move some profiling to UnlinkedCodeBlock https://bugs.webkit.org/show_bug.cgi?id=230078 Reviewed by Yusuke Suzuki. This patch adds

[webkit-changes] [281826] trunk/Source/JavaScriptCore

Title: [281826] trunk/Source/_javascript_Core Revision 281826 Author sbar...@apple.com Date 2021-08-31 15:46:05 -0700 (Tue, 31 Aug 2021) Log Message Baseline JIT's in_by_val and emitHasPrivate should load the property before branching on if the base is a cell

[webkit-changes] [281717] trunk/Source/JavaScriptCore

Title: [281717] trunk/Source/_javascript_Core Revision 281717 Author sbar...@apple.com Date 2021-08-27 12:53:12 -0700 (Fri, 27 Aug 2021) Log Message Update ARM64EHash https://bugs.webkit.org/show_bug.cgi?id=228962 Reviewed by Mark Lam. * assembler/AssemblerBuffer.h:

[webkit-changes] [281665] trunk

Title: [281665] trunk Revision 281665 Author sbar...@apple.com Date 2021-08-26 15:43:32 -0700 (Thu, 26 Aug 2021) Log Message r281485 was not sufficient in where it called disablePeepholeOptimization https://bugs.webkit.org/show_bug.cgi?id=229582 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [281485] trunk

Title: [281485] trunk Revision 281485 Author sbar...@apple.com Date 2021-08-23 19:59:56 -0700 (Mon, 23 Aug 2021) Log Message Disable peephole optimizations in the byte code generator after rewriting instructions for for-in https://bugs.webkit.org/show_bug.cgi?id=229420 Reviewed by

[webkit-changes] [281473] trunk

Title: [281473] trunk Revision 281473 Author sbar...@apple.com Date 2021-08-23 14:44:19 -0700 (Mon, 23 Aug 2021) Log Message compileEnumeratorHasProperty uses flushRegisters incorrectly https://bugs.webkit.org/show_bug.cgi?id=229412 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [281178] trunk/Source/JavaScriptCore

Title: [281178] trunk/Source/_javascript_Core Revision 281178 Author sbar...@apple.com Date 2021-08-17 19:27:03 -0700 (Tue, 17 Aug 2021) Log Message Add an option for canonicalizePrePostIncrements https://bugs.webkit.org/show_bug.cgi?id=229211 Reviewed by Mark Lam. The current phase

[webkit-changes] [280984] trunk/Source/JavaScriptCore

Title: [280984] trunk/Source/_javascript_Core Revision 280984 Author sbar...@apple.com Date 2021-08-12 13:45:02 -0700 (Thu, 12 Aug 2021) Log Message Update ARM64EHash https://bugs.webkit.org/show_bug.cgi?id=228962 Reviewed by Mark Lam. * assembler/AssemblerBuffer.h:

[webkit-changes] [280216] trunk/JSTests

Title: [280216] trunk/JSTests Revision 280216 Author sbar...@apple.com Date 2021-07-22 20:17:51 -0700 (Thu, 22 Jul 2021) Log Message JSTests/stress/test-out-of-memory shouldn't assume that we always OOM https://bugs.webkit.org/show_bug.cgi?id=228213 Reviewed by Mark Lam. *

[webkit-changes] [280198] trunk

Title: [280198] trunk Revision 280198 Author sbar...@apple.com Date 2021-07-22 14:37:02 -0700 (Thu, 22 Jul 2021) Log Message AirStackSlot's uint16_t byte size is too small https://bugs.webkit.org/show_bug.cgi?id=228193 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [280195] trunk/Source

Title: [280195] trunk/Source Revision 280195 Author sbar...@apple.com Date 2021-07-22 13:05:09 -0700 (Thu, 22 Jul 2021) Log Message Fix uses of Dependency::fence with respect to the compiler outsmarting us https://bugs.webkit.org/show_bug.cgi?id=227757 Reviewed by Robin Morisset.

[webkit-changes] [280109] trunk/Tools

Title: [280109] trunk/Tools Revision 280109 Author sbar...@apple.com Date 2021-07-20 15:55:56 -0700 (Tue, 20 Jul 2021) Log Message Don't run ftl-eager-no-cjit on debug builds https://bugs.webkit.org/show_bug.cgi?id=228118 Reviewed by Mark Lam. Many debug JSC stress tests time out

[webkit-changes] [280008] trunk

Title: [280008] trunk Revision 280008 Author sbar...@apple.com Date 2021-07-16 16:40:00 -0700 (Fri, 16 Jul 2021) Log Message Grab the lock in FTL::Thunks::keyForSlowPathCallThunk https://bugs.webkit.org/show_bug.cgi?id=227988 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [279845] trunk/JSTests

Title: [279845] trunk/JSTests Revision 279845 Author sbar...@apple.com Date 2021-07-12 12:05:55 -0700 (Mon, 12 Jul 2021) Log Message Run some tests for fewer iterations to prevent test timeouts https://bugs.webkit.org/show_bug.cgi?id=227879 Reviewed by Mark Lam. *

[webkit-changes] [279839] trunk/JSTests

Title: [279839] trunk/JSTests Revision 279839 Author sbar...@apple.com Date 2021-07-12 11:02:45 -0700 (Mon, 12 Jul 2021) Log Message stress/wasm-loop-consistency.js should require the --useExecutableAllocationFuzz=false JSC option https://bugs.webkit.org/show_bug.cgi?id=227876 Reviewed

[webkit-changes] [279813] trunk/Source/JavaScriptCore

Title: [279813] trunk/Source/_javascript_Core Revision 279813 Author sbar...@apple.com Date 2021-07-10 18:27:40 -0700 (Sat, 10 Jul 2021) Log Message Continue to consult InlineAccess's Structure even after switching to a stub IC https://bugs.webkit.org/show_bug.cgi?id=227785 Reviewed by

[webkit-changes] [279707] trunk/Source/JavaScriptCore

Title: [279707] trunk/Source/_javascript_Core Revision 279707 Author sbar...@apple.com Date 2021-07-07 19:20:51 -0700 (Wed, 07 Jul 2021) Log Message JSArrayBufferView::byteOffsetConcurrently has a race when using PAC https://bugs.webkit.org/show_bug.cgi?id=227765 Reviewed by Mark Lam.

[webkit-changes] [279620] trunk/JSTests

Title: [279620] trunk/JSTests Revision 279620 Author sbar...@apple.com Date 2021-07-06 14:12:55 -0700 (Tue, 06 Jul 2021) Log Message Run microbenchmarks/memcpy-typed-loop-small.js for fewer iterations to avoid timeouts https://bugs.webkit.org/show_bug.cgi?id=227717 Reviewed by Robin

[webkit-changes] [279449] trunk

Title: [279449] trunk Revision 279449 Author sbar...@apple.com Date 2021-06-30 23:07:33 -0700 (Wed, 30 Jun 2021) Log Message Turn off data ICs by default https://bugs.webkit.org/show_bug.cgi?id=227334 Reviewed by Yusuke Suzuki. JSTests: * microbenchmarks/deltablue-varargs.js: *

[webkit-changes] [279177] trunk/JSTests

Title: [279177] trunk/JSTests Revision 279177 Author sbar...@apple.com Date 2021-06-23 11:49:44 -0700 (Wed, 23 Jun 2021) Log Message Bound stress/put-by-id-flags with a fixed number of iterations https://bugs.webkit.org/show_bug.cgi?id=227305 Reviewed by Mark Lam. *

[webkit-changes] [279175] trunk/JSTests

Title: [279175] trunk/JSTests Revision 279175 Author sbar...@apple.com Date 2021-06-23 11:34:02 -0700 (Wed, 23 Jun 2021) Log Message Run typedarray-intrinsic-getters-change-prototype for a fixed set of iterations https://bugs.webkit.org/show_bug.cgi?id=227304 Reviewed by Mark Lam. *

[webkit-changes] [279167] trunk/Source/JavaScriptCore

Title: [279167] trunk/Source/_javascript_Core Revision 279167 Author sbar...@apple.com Date 2021-06-23 08:20:13 -0700 (Wed, 23 Jun 2021) Log Message Run lazy properties initializers under a DeferTerminationForAWhile scope https://bugs.webkit.org/show_bug.cgi?id=227271 Reviewed by Mark

[webkit-changes] [279132] trunk/JSTests

Title: [279132] trunk/JSTests Revision 279132 Author sbar...@apple.com Date 2021-06-22 11:48:07 -0700 (Tue, 22 Jun 2021) Log Message Don't assume stress/out-of-memory-while-constructing-BytecodeGenerator.js will OOM https://bugs.webkit.org/show_bug.cgi?id=227263 Reviewed by Yusuke

  1   2   3   4   5   6   7   8   9   10   >