Title: [241056] branches/safari-607-branch
- Revision
- 241056
- Author
- alanc...@apple.com
- Date
- 2019-02-06 14:16:17 -0800 (Wed, 06 Feb 2019)
Log Message
Cherry-pick r240616. rdar://problem/47774497
ToString node actually does GC.
https://bugs.webkit.org/show_bug.cgi?id=193920
<rdar://problem/46695900>
Reviewed by Yusuke Suzuki.
JSTests:
* stress/dfg-to-string-on-int-does-gc.js: Added.
* stress/dfg-to-string-on-string-object-does-not-gc.js: Added.
* stress/dfg-to-string-on-string-or-string-object-does-not-gc.js: Added.
Source/_javascript_Core:
Other than for StringObjectUse and StringOrStringObjectUse, ToString and
CallStringConstructor can allocate new JSStrings, and hence, can GC.
* dfg/DFGDoesGC.cpp:
(JSC::DFG::doesGC):
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@240616 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Modified Paths
Diff
Modified: branches/safari-607-branch/JSTests/ChangeLog (241055 => 241056)
--- branches/safari-607-branch/JSTests/ChangeLog 2019-02-06 22:16:15 UTC (rev 241055)
+++ branches/safari-607-branch/JSTests/ChangeLog 2019-02-06 22:16:17 UTC (rev 241056)
@@ -1,3 +1,42 @@
+2019-02-05 Alan Coon <alanc...@apple.com>
+
+ Cherry-pick r240616. rdar://problem/47774497
+
+ ToString node actually does GC.
+ https://bugs.webkit.org/show_bug.cgi?id=193920
+ <rdar://problem/46695900>
+
+ Reviewed by Yusuke Suzuki.
+
+ JSTests:
+
+ * stress/dfg-to-string-on-int-does-gc.js: Added.
+ * stress/dfg-to-string-on-string-object-does-not-gc.js: Added.
+ * stress/dfg-to-string-on-string-or-string-object-does-not-gc.js: Added.
+
+ Source/_javascript_Core:
+
+ Other than for StringObjectUse and StringOrStringObjectUse, ToString and
+ CallStringConstructor can allocate new JSStrings, and hence, can GC.
+
+ * dfg/DFGDoesGC.cpp:
+ (JSC::DFG::doesGC):
+
+
+ git-svn-id: https://svn.webkit.org/repository/webkit/trunk@240616 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+ 2019-01-28 Mark Lam <mark....@apple.com>
+
+ ToString node actually does GC.
+ https://bugs.webkit.org/show_bug.cgi?id=193920
+ <rdar://problem/46695900>
+
+ Reviewed by Yusuke Suzuki.
+
+ * stress/dfg-to-string-on-int-does-gc.js: Added.
+ * stress/dfg-to-string-on-string-object-does-not-gc.js: Added.
+ * stress/dfg-to-string-on-string-or-string-object-does-not-gc.js: Added.
+
2019-01-28 Mark Lam <mark....@apple.com>
Cherry-pick r240616. rdar://problem/47774497
Modified: branches/safari-607-branch/Source/_javascript_Core/ChangeLog (241055 => 241056)
--- branches/safari-607-branch/Source/_javascript_Core/ChangeLog 2019-02-06 22:16:15 UTC (rev 241055)
+++ branches/safari-607-branch/Source/_javascript_Core/ChangeLog 2019-02-06 22:16:17 UTC (rev 241056)
@@ -1,5 +1,46 @@
2019-02-05 Alan Coon <alanc...@apple.com>
+ Cherry-pick r240616. rdar://problem/47774497
+
+ ToString node actually does GC.
+ https://bugs.webkit.org/show_bug.cgi?id=193920
+ <rdar://problem/46695900>
+
+ Reviewed by Yusuke Suzuki.
+
+ JSTests:
+
+ * stress/dfg-to-string-on-int-does-gc.js: Added.
+ * stress/dfg-to-string-on-string-object-does-not-gc.js: Added.
+ * stress/dfg-to-string-on-string-or-string-object-does-not-gc.js: Added.
+
+ Source/_javascript_Core:
+
+ Other than for StringObjectUse and StringOrStringObjectUse, ToString and
+ CallStringConstructor can allocate new JSStrings, and hence, can GC.
+
+ * dfg/DFGDoesGC.cpp:
+ (JSC::DFG::doesGC):
+
+
+ git-svn-id: https://svn.webkit.org/repository/webkit/trunk@240616 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+ 2019-01-28 Mark Lam <mark....@apple.com>
+
+ ToString node actually does GC.
+ https://bugs.webkit.org/show_bug.cgi?id=193920
+ <rdar://problem/46695900>
+
+ Reviewed by Yusuke Suzuki.
+
+ Other than for StringObjectUse and StringOrStringObjectUse, ToString and
+ CallStringConstructor can allocate new JSStrings, and hence, can GC.
+
+ * dfg/DFGDoesGC.cpp:
+ (JSC::DFG::doesGC):
+
+2019-02-05 Alan Coon <alanc...@apple.com>
+
Cherry-pick r240448. rdar://problem/47774335
Update ARM64EHash
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
